Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 25 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 46 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 46 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 13 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   280   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   280   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   280   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   280   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   280   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   280   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   280   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   280   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   280   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   280   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   280   NtClose  (12, ... ) == 0x0
 00014   280   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   280   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   280   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   280   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   280   NtClose  (16, ... ) == 0x0
 00021   280   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   280   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   280   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   280   NtClose  (16, ... ) == 0x0
 00026   280   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   280   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   280   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   280   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   280   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 276, 280, 1424, 0} "\360L\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" )  ... {28, 56, reply, 0, 276, 280, 1424, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 276, 280, 1424, 0} "\360L\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" )  ) == 0x0
 00032   280   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   280   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   280   NtClose  (16, ... ) == 0x0
 00036   280   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   280   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   280   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   280   NtClose  (28, ... ) == 0x0
 00041   280   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   280   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   280   NtClose  (28, ... ) == 0x0
 00045   280   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   280   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   280   NtClose  (28, ... ) == 0x0
 00049   280   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   280   NtClose  (28, ... ) == 0x0
 00052   280   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   280   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   280   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   280   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 276, 280, 1430, 0} "\260.\27\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" )  ... {28, 56, reply, 0, 276, 280, 1430, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 276, 280, 1430, 0} "\260.\27\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" )  ) == 0x0
 00056   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   280   NtClose  (28, ... ) == 0x0
 00062   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   280   NtClose  (28, ... ) == 0x0
 00065   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   280   NtClose  (28, ... ) == 0x0
 00068   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   280   NtClose  (28, ... ) == 0x0
 00071   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   280   NtClose  (28, ... ) == 0x0
 00080   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   280   NtClose  (28, ... ) == 0x0
 00083   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   280   NtClose  (28, ... ) == 0x0
 00086   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   280   NtClose  (28, ... ) == 0x0
 00095   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   280   NtClose  (28, ... ) == 0x0
 00098   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   280   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   280   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   280   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   280   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   280   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   280   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   280   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   280   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   280   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   280   NtClose  (40, ... ) == 0x0
 00115   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   280   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   280   NtClose  (40, ... ) == 0x0
 00119   280   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   280   NtClose  (36, ... ) == 0x0
 00121   280   NtClose  (28, ... ) == 0x0
 00122   280   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   280   NtClose  (32, ... ) == 0x0
 00124   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   280   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   280   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   280   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   280   NtClose  (32, ... ) == 0x0
 00132   280   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   280   NtClose  (28, ... ) == 0x0
 00134   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   280   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   280   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   280   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   280   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   280   NtClose  (28, ... ) == 0x0
 00146   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   280   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   280   NtClose  (28, ... ) == 0x0
 00149   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   280   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   280   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   280   NtClose  (28, ... ) == 0x0
 00153   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   280   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   280   NtClose  (28, ... ) == 0x0
 00156   280   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   280   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   280   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   280   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\31\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 276, 280, 1443, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" )  ... {28, 56, reply, 0, 276, 280, 1443, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\31\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 276, 280, 1443, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" )  ) == 0x0
 00161   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   280   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   280   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   280   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   280   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482024, ) == 0x0
 00166   280   NtQueryInformationToken  (-2147482024, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   280   NtQueryInformationToken  (-2147482024, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   280   NtClose  (-2147482024, ... ) == 0x0
 00169   280   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   280   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   280   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   280   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482024, ) }, ... -2147482024, ) == 0x0
 00173   280   NtQueryValueKey  (-2147482024,  (-2147482024, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   280   NtClose  (-2147482024, ... ) == 0x0
 00175   280   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   280   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   280   NtClose  (-2147482020, ... ) == 0x0
 00178   280   NtQueryDefaultLocale  (0, -132412916, ... ) == 0x0
 00179   280   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   280   NtUserCallNoParam  (24, ... ) == 0x0
 00181   280   NtGdiCreateCompatibleDC  (0, ...
 00182   280   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   280   NtGdiCreateCompatibleDC  ... ) == 0x90103e0
 00183   280   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   280   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   280   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0x60503d2
 00186   280   NtGdiCreateSolidBrush  (0, 0, ...
 00187   280   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   280   NtGdiCreateSolidBrush  ... ) == 0x46100384
 00188   280   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   280   NtGdiCreateCompatibleDC  (0, ... ) == 0x40103d3
 00190   280   NtGdiSelectBitmap  (67175379, 100991954, ... ) == 0x185000f
 00191   280   NtUserGetThreadDesktop  (280, 0, ... ) == 0x2c
 00192   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   280   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   280   NtClose  (52, ... ) == 0x0
 00195   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810ec017
 00197   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810ec01c
 00199   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810ec01e
 00201   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810e8002
 00203   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810ec018
 00205   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810ec01a
 00207   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810ec01d
 00209   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810ec026
 00211   280   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   280   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810ec019
 00213   280   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810ec020
 00214   280   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810ec022
 00215   280   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00216   280   NtAllocateVirtualMemory  (-1, 6057984, 0, 4096, 4096, 32, ... 6057984, 4096, ) == 0x0
 00215   280   NtUserRegisterClassExWOW  ... ) == 0x810ec023
 00217   280   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810ec024
 00218   280   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810ec025
 00219   280   NtCallbackReturn  (0, 0, 0, ...
 00220   280   NtGdiInit  (... ) == 0x1
 00221   280   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   280   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   280   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   280   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   280   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   280   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   280   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   280   NtClose  (52, ... ) == 0x0
 00230   280   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   280   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   280   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   280   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   280   NtClose  (52, ... ) == 0x0
 00236   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   280   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   280   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   280   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   280   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   280   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   280   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   280   NtClose  (52, ... ) == 0x0
 00246   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   280   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   280   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   280   NtClose  (52, ... ) == 0x0
 00250   280   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   280   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   280   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   280   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   280   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   280   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   280   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   280   NtClose  (56, ... ) == 0x0
 00258   280   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   280   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   280   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   280   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   280   NtClose  (56, ... ) == 0x0
 00263   280   NtQueryDefaultUILanguage  (1241756, ...
 00264   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   280   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   280   NtClose  (-2147482020, ... ) == 0x0
 00268   280   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   280   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   280   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   280   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   280   NtClose  (-2147482032, ... ) == 0x0
 00273   280   NtClose  (-2147482020, ... ) == 0x0
 00263   280   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   280   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   280   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   280   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   280   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   280   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   280   NtQueryDefaultUILanguage  (2013024600, ...
 00281   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   280   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   280   NtClose  (-2147482020, ... ) == 0x0
 00285   280   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   280   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   280   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   280   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   280   NtClose  (-2147482032, ... ) == 0x0
 00290   280   NtClose  (-2147482020, ... ) == 0x0
 00280   280   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   280   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   280   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   280   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   280   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   280   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\31\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 276, 280, 1446, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 276, 280, 1446, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\31\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 276, 280, 1446, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   280   NtClose  (56, ... ) == 0x0
 00297   280   NtClose  (60, ... ) == 0x0
 00298   280   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   280   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   280   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   280   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   280   NtClose  (56, ... ) == 0x0
 00314   280   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   280   NtClose  (64, ... ) == 0x0
 00316   280   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   280   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   280   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   280   NtClose  (64, ... ) == 0x0
 00321   280   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   280   NtClose  (56, ... ) == 0x0
 00323   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   280   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   280   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   280   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   280   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   280   NtQueryDefaultUILanguage  (1239368, ...
 00346   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   280   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   280   NtClose  (-2147482020, ... ) == 0x0
 00350   280   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   280   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   280   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   280   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   280   NtClose  (-2147482032, ... ) == 0x0
 00355   280   NtClose  (-2147482020, ... ) == 0x0
 00345   280   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   280   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   280   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   280   NtClose  (56, ... ) == 0x0
 00361   280   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   280   NtClose  (64, ... ) == 0x0
 00363   280   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   280   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   280   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   280   NtClose  (64, ... ) == 0x0
 00368   280   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   280   NtClose  (56, ... ) == 0x0
 00370   280   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   280   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   280   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   280   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   280   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   280   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   280   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\31\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 276, 280, 1447, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 276, 280, 1447, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\31\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 276, 280, 1447, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   280   NtClose  (56, ... ) == 0x0
 00378   280   NtClose  (64, ... ) == 0x0
 00379   280   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   280   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   280   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   280   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   280   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   280   NtUserGetDC  (0, ... ) == 0x1010054
 00385   280   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00386   280   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   280   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   280   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   280   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   280   NtClose  (64, ... ) == 0x0
 00391   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   280   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   280   NtClose  (64, ... ) == 0x0
 00395   280   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   280   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   280   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   280   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   280   NtClose  (56, ... ) == 0x0
 00400   280   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   280   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   280   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   280   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   280   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   280   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   280   NtClose  (68, ... ) == 0x0
 00407   280   NtClose  (56, ... ) == 0x0
 00408   280   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   280   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   280   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   280   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   280   NtClose  (56, ... ) == 0x0
 00413   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec03b
 00415   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec03d
 00416   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec03f
 00418   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec041
 00420   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec043
 00422   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec045
 00423   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec047
 00425   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec049
 00427   280   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec04b
 00430   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec04d
 00432   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec04f
 00434   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec051
 00435   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec053
 00437   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec055
 00439   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec057
 00440   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec059
 00442   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec05b
 00444   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec05d
 00446   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec05f
 00448   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec017
 00450   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec019
 00452   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec018
 00454   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec01a
 00456   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   280   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810ec01c
 00458   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00459   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec01e
 00460   280   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00461   280   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ...
 00462   280   NtAllocateVirtualMemory  (-1, 6062080, 0, 4096, 4096, 32, ... 6062080, 4096, ) == 0x0
 00461   280   NtUserRegisterClassExWOW  ... ) == 0x810ec01b
 00463   280   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00464   280   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810ec068
 00465   280   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00466   280   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810ec06a
 00467   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00468   280   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00469   280   NtClose  (56, ... ) == 0x0
 00470   280   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {276, 0}, ... 56, ) == 0x0
 00471   280   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00472   280   NtClose  (56, ... ) == 0x0
 00473   280   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00474   280   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00475   280   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00476   280   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00477   280   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00478   280   NtClose  (56, ... ) == 0x0
 00479   280   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00480   280   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00481   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00482   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00483   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec03b
 00484   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec03d
 00486   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec03f
 00489   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec041
 00492   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec043
 00495   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec045
 00497   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec047
 00500   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   280   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   280   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810ec049
 00503   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec04b
 00506   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec04d
 00509   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec04f
 00512   280   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   280   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810ec051
 00514   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec053
 00517   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec055
 00520   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec057
 00521   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec059
 00524   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec05b
 00527   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec05d
 00530   280   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   280   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   280   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810ec05f
 00533   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   280   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   280   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   280   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   280   NtTestAlert  (... ) == 0x0
 00554   280   NtContinue  (1244464, 1, ...
 00555   280   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   280   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   280   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   280   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   280   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   280   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   280   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   280   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   280   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   280   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   280   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   280   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   280   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   280   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   280   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   280   NtClose  (56, ... ) == 0x0
 00572   280   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   280   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   280   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   280   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   280   NtClose  (56, ... ) == 0x0
 00580   280   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   280   NtClose  (68, ... ) == 0x0
 00582   280   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   280   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   280   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   280   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   280   NtClose  (68, ... ) == 0x0
 00587   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   280   NtReleaseMutant  (16, ...
 00589   280   NtContinue  (-132415352, 0, ...
 00588   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   280   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   280   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   280   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   280   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   280   NtUserCallNoParam  (29, ...
 00595   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   280   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   280   NtClose  (68, ... ) == 0x0
 00599   280   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   280   NtClose  (56, ... ) == 0x0
 00601   280   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   280   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   280   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   280   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   280   NtClose  (56, ... ) == 0x0
 00607   280   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   280   NtClose  (68, ... ) == 0x0
 00609   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00610   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00611   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   280   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   280   NtClose  (68, ... ) == 0x0
 00615   280   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   280   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   280   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   280   NtClose  (56, ... ) == 0x0
 00619   280   NtClose  (68, ... ) == 0x0
 00620   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   280   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   280   NtClose  (68, ... ) == 0x0
 00624   280   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   280   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   280   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   280   NtClose  (56, ... ) == 0x0
 00628   280   NtClose  (68, ... ) == 0x0
 00629   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   280   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   280   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   280   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   280   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   280   NtUserGetGUIThreadInfo  (280, 1244344, ... ) == 0x1
 00636   280   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   280   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 276, 280, 1449, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 276, 280, 1449, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 276, 280, 1449, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   280   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 276, 280, 1450, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 276, 280, 1450, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 276, 280, 1450, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   280   NtUserCallNoParam  (29, ...
 00640   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   280   NtUserCallNoParam  ... ) == 0x0
 00641   280   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   280   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0x70a03ed
 00643   280   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0xb0a03e4
 00644   280   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 276, 280, 1451, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 276, 280, 1451, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 276, 280, 1451, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   280   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00647   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00648   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00649   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00650   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00651   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00652   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00653   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00654   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00655   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00656   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00657   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00658   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00659   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00660   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00661   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00662   280   NtUserGetWindowDC  (0, ... ) == 0x1010050
 00663   280   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0x51003ea
 00664   280   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00665   280   NtUserCallNoParam  (29, ...
 00666   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   280   NtUserCallNoParam  ... ) == 0x0
 00667   280   NtUserCallNoParam  (29, ...
 00668   280   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   280   NtUserCallNoParam  ... ) == 0x0
 00594   280   NtUserCallNoParam  ... ) == 0x1
 00669   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   280   NtReleaseMutant  (16, ...
 00671   280   NtContinue  (-132415352, 0, ...
 00670   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   280   NtReleaseMutant  (16, ...
 00674   280   NtContinue  (-132415352, 0, ...
 00673   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   280   NtReleaseMutant  (16, ...
 00677   280   NtContinue  (-132415352, 0, ...
 00676   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   280   NtReleaseMutant  (16, ...
 00680   280   NtContinue  (-132415352, 0, ...
 00679   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   280   NtReleaseMutant  (16, ...
 00683   280   NtContinue  (-132415352, 0, ...
 00682   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   280   NtReleaseMutant  (16, ...
 00686   280   NtContinue  (-132415352, 0, ...
 00685   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   280   NtReleaseMutant  (16, ...
 00689   280   NtContinue  (-132415352, 0, ...
 00688   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   280   NtReleaseMutant  (16, ...
 00692   280   NtContinue  (-132415352, 0, ...
 00691   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   280   NtReleaseMutant  (16, ...
 00695   280   NtContinue  (-132415352, 0, ...
 00694   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   280   NtReleaseMutant  (16, ...
 00698   280   NtContinue  (-132415352, 0, ...
 00697   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   280   NtReleaseMutant  (16, ...
 00701   280   NtContinue  (-132415352, 0, ...
 00700   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   280   NtReleaseMutant  (16, ...
 00704   280   NtContinue  (-132415352, 0, ...
 00703   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   280   NtReleaseMutant  (16, ...
 00707   280   NtContinue  (-132415352, 0, ...
 00706   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   280   NtReleaseMutant  (16, ...
 00710   280   NtContinue  (-132415352, 0, ...
 00709   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   280   NtReleaseMutant  (16, ...
 00713   280   NtContinue  (-132415352, 0, ...
 00712   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   280   NtReleaseMutant  (16, ...
 00716   280   NtContinue  (-132415352, 0, ...
 00715   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   280   NtReleaseMutant  (16, ...
 00719   280   NtContinue  (-132415352, 0, ...
 00718   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   280   NtReleaseMutant  (16, ...
 00722   280   NtContinue  (-132415352, 0, ...
 00721   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   280   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   280   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   280   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   280   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   280   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   280   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   280   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   280   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   280   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   280   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   280   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   280   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   280   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   280   NtClose  (88, ... ) == 0x0
 00741   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   280   NtClose  (88, ... ) == 0x0
 00746   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   280   NtClose  (88, ... ) == 0x0
 00751   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   280   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   280   NtClose  (88, ... ) == 0x0
 00757   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   280   NtClose  (88, ... ) == 0x0
 00762   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   280   NtClose  (88, ... ) == 0x0
 00767   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   280   NtClose  (88, ... ) == 0x0
 00772   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   280   NtClose  (88, ... ) == 0x0
 00777   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   280   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   280   NtClose  (88, ... ) == 0x0
 00783   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\24\1\0\0\30\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   280   NtClose  (88, ... ) == 0x0
 00788   280   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   280   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\24\1\0\0\30\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\24\1\0\0\30\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\24\1\0\0\30\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\24\1\0\0\30\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\24\1\0\0\30\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\24\1\0\0\30\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\24\1\0\0\30\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\24\1\0\0\30\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\24\1\0\0\30\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\24\1\0\0\30\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   280   NtClose  (88, ... ) == 0x0
 00793   280   NtClose  (84, ... ) == 0x0
 00794   280   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   280   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   280   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   280   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   280   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   280   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   280   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   280   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   280   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   280   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   280   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   280   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   280   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   280   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   280   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   280   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   280   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   280   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   280   NtClose  (96, ... ) == 0x0
 00817   280   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   280   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   280   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   280   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   280   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   280   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   280   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   280   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   280   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   280   NtClose  (96, ... ) == 0x0
 00831   280   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   280   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   280   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   280   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   280   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   280   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   280   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   280   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   280   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   280   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   280   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   280   NtClose  (96, ... ) == 0x0
 00846   280   NtClose  (92, ... ) == 0x0
 00847   280   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   280   NtClose  (72, ... ) == 0x0
 00849   280   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   280   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   280   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   280   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   280   NtClose  (72, ... ) == 0x0
 00854   280   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   280   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   280   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   280   NtAllocateVirtualMemory  (-1, 9846784, 0, 16384, 4096, 4, ... 9846784, 16384, ) == 0x0
 00858   280   NtAllocateVirtualMemory  (-1, 0, 0, 310, 4096, 64, ... 9502720, 4096, ) == 0x0
 00859   280   NtFreeVirtualMemory  (-1, (0x964000), 16384, 16384, ... (0x964000), 16384, ) == 0x0
 00860   280   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00861   280   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00862   280   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00863   280   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00864   280   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00865   280   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00866   280   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00867   280   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00868   280   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00869   280   NtClose  (92, ... ) == 0x0
 00870   280   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00871   280   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00872   280   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00873   280   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00874   280   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00875   280   NtClose  (92, ... ) == 0x0
 00876   280   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00877   280   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00878   280   NtClose  (92, ... ) == 0x0
 00879   280   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00880   280   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00881   280   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00882   280   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00883   280   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00884   280   NtClose  (92, ... ) == 0x0
 00885   280   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00886   280   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00887   280   NtClose  (92, ... ) == 0x0
 00888   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00889   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00890   280   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00891   280   NtClose  (92, ... ) == 0x0
 00892   280   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00893   280   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00894   280   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00895   280   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00896   280   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00897   280   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00898   280   NtSetInformationFile  (-2147482808, -132414900, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00899   280   NtSetInformationFile  (-2147482808, -132414532, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00900   280   NtSetInformationFile  (-2147482808, -132414524, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   280   NtCreateKey  ... 100, 1, ) == 0x0
 00901   280   NtClose  (96, ... ) == 0x0
 00902   280   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00903   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00904   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00905   280   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00906   280   NtClose  (96, ... ) == 0x0
 00907   280   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00908   280   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00909   280   NtClose  (102, ... ) == 0x0
 00910   280   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00911   280   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00912   280   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00913   280   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00914   280   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00915   280   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00916   280   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00917   280   NtClose  (96, ... ) == 0x0
 00918   280   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00919   280   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00920   280   NtClose  (102, ... ) == 0x0
 00921   280   NtContinue  (1244336, 0, ...
 00922   280   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00923   280   NtContinue  (1244320, 0, ...
 00924   280   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00925   280   NtContinue  (1244320, 0, ...
 00926   280   NtContinue  (1244328, 0, ...
 00927   280   NtContinue  (1244316, 0, ...
 00928   280   NtContinue  (1244328, 0, ...
 00929   280   NtContinue  (1244336, 0, ...
 00930   280   NtContinue  (1244328, 0, ...
 00931   280   NtContinue  (1244328, 0, ...
 00932   280   NtContinue  (1244328, 0, ...
 00933   280   NtContinue  (1244328, 0, ...
 00934   280   NtContinue  (1244328, 0, ...
 00935   280   NtContinue  (1244328, 0, ...
 00936   280   NtContinue  (1244328, 0, ...
 00937   280   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00938   280   NtContinue  (1244336, 0, ...
 00939   280   NtContinue  (1244336, 0, ...
 00940   280   NtContinue  (1244336, 0, ...
 00941   280   NtContinue  (1244336, 0, ...
 00942   280   NtContinue  (1244336, 0, ...
 00943   280   NtContinue  (1244336, 0, ...
 00944   280   NtContinue  (1244336, 0, ...
 00945   280   NtContinue  (1244336, 0, ...
 00946   280   NtContinue  (1244336, 0, ...
 00947   280   NtContinue  (1244336, 0, ...
 00948   280   NtContinue  (1244336, 0, ...
 00949   280   NtContinue  (1244336, 0, ...
 00950   280   NtContinue  (1244336, 0, ...
 00951   280   NtContinue  (1244336, 0, ...
 00952   280   NtContinue  (1244336, 0, ...
 00953   280   NtContinue  (1244336, 0, ...
 00954   280   NtContinue  (1244336, 0, ...
 00955   280   NtContinue  (1244336, 0, ...
 00956   280   NtContinue  (1244336, 0, ...
 00957   280   NtContinue  (1244336, 0, ...
 00958   280   NtContinue  (1244336, 0, ...
 00959   280   NtContinue  (1244336, 0, ...
 00960   280   NtContinue  (1244336, 0, ...
 00961   280   NtContinue  (1244336, 0, ...
 00962   280   NtContinue  (1244336, 0, ...
 00963   280   NtContinue  (1244336, 0, ...
 00964   280   NtContinue  (1244336, 0, ...
 00965   280   NtContinue  (1244336, 0, ...
 00966   280   NtContinue  (1244336, 0, ...
 00967   280   NtContinue  (1244336, 0, ...
 00968   280   NtContinue  (1244336, 0, ...
 00969   280   NtContinue  (1244336, 0, ...
 00970   280   NtContinue  (1244336, 0, ...
 00971   280   NtContinue  (1244336, 0, ...
 00972   280   NtContinue  (1244336, 0, ...
 00973   280   NtContinue  (1244336, 0, ...
 00974   280   NtContinue  (1244336, 0, ...
 00975   280   NtContinue  (1244336, 0, ...
 00976   280   NtContinue  (1244336, 0, ...
 00977   280   NtContinue  (1244336, 0, ...
 00978   280   NtContinue  (1244336, 0, ...
 00979   280   NtContinue  (1244336, 0, ...
 00980   280   NtContinue  (1244336, 0, ...
 00981   280   NtContinue  (1244336, 0, ...
 00982   280   NtContinue  (1244336, 0, ...
 00983   280   NtContinue  (1244336, 0, ...
 00984   280   NtContinue  (1244336, 0, ...
 00985   280   NtContinue  (1244336, 0, ...
 00986   280   NtContinue  (1244336, 0, ...
 00987   280   NtContinue  (1244336, 0, ...
 00988   280   NtContinue  (1244336, 0, ...
 00989   280   NtContinue  (1244336, 0, ...
 00990   280   NtContinue  (1244336, 0, ...
 00991   280   NtContinue  (1244336, 0, ...
 00992   280   NtContinue  (1244336, 0, ...
 00993   280   NtContinue  (1244336, 0, ...
 00994   280   NtContinue  (1244336, 0, ...
 00995   280   NtContinue  (1244336, 0, ...
 00996   280   NtContinue  (1244336, 0, ...
 00997   280   NtContinue  (1244336, 0, ...
 00998   280   NtContinue  (1244336, 0, ...
 00999   280   NtContinue  (1244336, 0, ...
 01000   280   NtContinue  (1244336, 0, ...
 01001   280   NtContinue  (1244336, 0, ...
 01002   280   NtContinue  (1244336, 0, ...
 01003   280   NtContinue  (1244336, 0, ...
 01004   280   NtContinue  (1244336, 0, ...
 01005   280   NtContinue  (1244336, 0, ...
 01006   280   NtContinue  (1244336, 0, ...
 01007   280   NtContinue  (1244336, 0, ...
 01008   280   NtContinue  (1244336, 0, ...
 01009   280   NtContinue  (1244336, 0, ...
 01010   280   NtContinue  (1244336, 0, ...
 01011   280   NtContinue  (1244336, 0, ...
 01012   280   NtContinue  (1244336, 0, ...
 01013   280   NtContinue  (1244336, 0, ...
 01014   280   NtContinue  (1244336, 0, ...
 01015   280   NtContinue  (1244336, 0, ...
 01016   280   NtContinue  (1244336, 0, ...
 01017   280   NtContinue  (1244336, 0, ...
 01018   280   NtContinue  (1244336, 0, ...
 01019   280   NtContinue  (1244336, 0, ...
 01020   280   NtContinue  (1244336, 0, ...
 01021   280   NtContinue  (1244336, 0, ...
 01022   280   NtContinue  (1244336, 0, ...
 01023   280   NtContinue  (1244336, 0, ...
 01024   280   NtContinue  (1244336, 0, ...
 01025   280   NtContinue  (1244336, 0, ...
 01026   280   NtContinue  (1244336, 0, ...
 01027   280   NtContinue  (1244336, 0, ...
 01028   280   NtContinue  (1244336, 0, ...
 01029   280   NtContinue  (1244336, 0, ...
 01030   280   NtContinue  (1244336, 0, ...
 01031   280   NtContinue  (1244336, 0, ...
 01032   280   NtContinue  (1244336, 0, ...
 01033   280   NtContinue  (1244336, 0, ...
 01034   280   NtContinue  (1244336, 0, ...
 01035   280   NtContinue  (1244336, 0, ...
 01036   280   NtContinue  (1244336, 0, ...
 01037   280   NtContinue  (1244336, 0, ...
 01038   280   NtContinue  (1244336, 0, ...
 01039   280   NtContinue  (1244336, 0, ...
 01040   280   NtContinue  (1244336, 0, ...
 01041   280   NtContinue  (1244336, 0, ...
 01042   280   NtContinue  (1244336, 0, ...
 01043   280   NtContinue  (1244336, 0, ...
 01044   280   NtContinue  (1244336, 0, ...
 01045   280   NtContinue  (1244336, 0, ...
 01046   280   NtContinue  (1244336, 0, ...
 01047   280   NtContinue  (1244336, 0, ...
 01048   280   NtContinue  (1244336, 0, ...
 01049   280   NtContinue  (1244336, 0, ...
 01050   280   NtContinue  (1244336, 0, ...
 01051   280   NtContinue  (1244336, 0, ...
 01052   280   NtContinue  (1244336, 0, ...
 01053   280   NtContinue  (1244336, 0, ...
 01054   280   NtContinue  (1244336, 0, ...
 01055   280   NtContinue  (1244336, 0, ...
 01056   280   NtContinue  (1244336, 0, ...
 01057   280   NtContinue  (1244336, 0, ...
 01058   280   NtContinue  (1244336, 0, ...
 01059   280   NtContinue  (1244336, 0, ...
 01060   280   NtContinue  (1244336, 0, ...
 01061   280   NtContinue  (1244336, 0, ...
 01062   280   NtContinue  (1244336, 0, ...
 01063   280   NtContinue  (1244336, 0, ...
 01064   280   NtContinue  (1244336, 0, ...
 01065   280   NtContinue  (1244336, 0, ...
 01066   280   NtContinue  (1244336, 0, ...
 01067   280   NtContinue  (1244336, 0, ...
 01068   280   NtContinue  (1244336, 0, ...
 01069   280   NtContinue  (1244336, 0, ...
 01070   280   NtContinue  (1244336, 0, ...
 01071   280   NtContinue  (1244336, 0, ...
 01072   280   NtContinue  (1244336, 0, ...
 01073   280   NtContinue  (1244336, 0, ...
 01074   280   NtContinue  (1244336, 0, ...
 01075   280   NtContinue  (1244336, 0, ...
 01076   280   NtContinue  (1244336, 0, ...
 01077   280   NtContinue  (1244336, 0, ...
 01078   280   NtContinue  (1244336, 0, ...
 01079   280   NtContinue  (1244336, 0, ...
 01080   280   NtContinue  (1244336, 0, ...
 01081   280   NtContinue  (1244336, 0, ...
 01082   280   NtContinue  (1244336, 0, ...
 01083   280   NtContinue  (1244336, 0, ...
 01084   280   NtContinue  (1244336, 0, ...
 01085   280   NtContinue  (1244336, 0, ...
 01086   280   NtContinue  (1244336, 0, ...
 01087   280   NtContinue  (1244336, 0, ...
 01088   280   NtContinue  (1244336, 0, ...
 01089   280   NtContinue  (1244336, 0, ...
 01090   280   NtContinue  (1244336, 0, ...
 01091   280   NtContinue  (1244336, 0, ...
 01092   280   NtContinue  (1244336, 0, ...
 01093   280   NtContinue  (1244336, 0, ...
 01094   280   NtContinue  (1244336, 0, ...
 01095   280   NtContinue  (1244336, 0, ...
 01096   280   NtContinue  (1244336, 0, ...
 01097   280   NtContinue  (1244336, 0, ...
 01098   280   NtContinue  (1244336, 0, ...
 01099   280   NtContinue  (1244336, 0, ...
 01100   280   NtContinue  (1244336, 0, ...
 01101   280   NtContinue  (1244336, 0, ...
 01102   280   NtContinue  (1244336, 0, ...
 01103   280   NtContinue  (1244336, 0, ...
 01104   280   NtContinue  (1244336, 0, ...
 01105   280   NtContinue  (1244336, 0, ...
 01106   280   NtContinue  (1244336, 0, ...
 01107   280   NtContinue  (1244336, 0, ...
 01108   280   NtContinue  (1244336, 0, ...
 01109   280   NtContinue  (1244336, 0, ...
 01110   280   NtContinue  (1244336, 0, ...
 01111   280   NtContinue  (1244336, 0, ...
 01112   280   NtContinue  (1244336, 0, ...
 01113   280   NtContinue  (1244336, 0, ...
 01114   280   NtContinue  (1244336, 0, ...
 01115   280   NtContinue  (1244336, 0, ...
 01116   280   NtContinue  (1244336, 0, ...
 01117   280   NtContinue  (1244336, 0, ...
 01118   280   NtContinue  (1244336, 0, ...
 01119   280   NtContinue  (1244336, 0, ...
 01120   280   NtContinue  (1244336, 0, ...
 01121   280   NtContinue  (1244336, 0, ...
 01122   280   NtContinue  (1244336, 0, ...
 01123   280   NtContinue  (1244336, 0, ...
 01124   280   NtContinue  (1244336, 0, ...
 01125   280   NtContinue  (1244336, 0, ...
 01126   280   NtContinue  (1244336, 0, ...
 01127   280   NtContinue  (1244336, 0, ...
 01128   280   NtContinue  (1244336, 0, ...
 01129   280   NtContinue  (1244336, 0, ...
 01130   280   NtContinue  (1244336, 0, ...
 01131   280   NtContinue  (1244336, 0, ...
 01132   280   NtContinue  (1244336, 0, ...
 01133   280   NtContinue  (1244336, 0, ...
 01134   280   NtContinue  (1244336, 0, ...
 01135   280   NtContinue  (1244336, 0, ...
 01136   280   NtContinue  (1244336, 0, ...
 01137   280   NtContinue  (1244336, 0, ...
 01138   280   NtContinue  (1244336, 0, ...
 01139   280   NtContinue  (1244336, 0, ...
 01140   280   NtContinue  (1244336, 0, ...
 01141   280   NtContinue  (1244336, 0, ...
 01142   280   NtContinue  (1244336, 0, ...
 01143   280   NtContinue  (1244336, 0, ...
 01144   280   NtContinue  (1244336, 0, ...
 01145   280   NtContinue  (1244336, 0, ...
 01146   280   NtContinue  (1244336, 0, ...
 01147   280   NtContinue  (1244336, 0, ...
 01148   280   NtContinue  (1244336, 0, ...
 01149   280   NtContinue  (1244336, 0, ...
 01150   280   NtContinue  (1244336, 0, ...
 01151   280   NtContinue  (1244336, 0, ...
 01152   280   NtContinue  (1244336, 0, ...
 01153   280   NtContinue  (1244336, 0, ...
 01154   280   NtContinue  (1244336, 0, ...
 01155   280   NtContinue  (1244336, 0, ...
 01156   280   NtContinue  (1244336, 0, ...
 01157   280   NtContinue  (1244336, 0, ...
 01158   280   NtContinue  (1244336, 0, ...
 01159   280   NtContinue  (1244336, 0, ...
 01160   280   NtContinue  (1244336, 0, ...
 01161   280   NtContinue  (1244336, 0, ...
 01162   280   NtContinue  (1244336, 0, ...
 01163   280   NtContinue  (1244336, 0, ...
 01164   280   NtContinue  (1244336, 0, ...
 01165   280   NtContinue  (1244336, 0, ...
 01166   280   NtContinue  (1244336, 0, ...
 01167   280   NtContinue  (1244336, 0, ...
 01168   280   NtContinue  (1244336, 0, ...
 01169   280   NtContinue  (1244336, 0, ...
 01170   280   NtContinue  (1244336, 0, ...
 01171   280   NtContinue  (1244336, 0, ...
 01172   280   NtContinue  (1244336, 0, ...
 01173   280   NtContinue  (1244336, 0, ...
 01174   280   NtContinue  (1244336, 0, ...
 01175   280   NtContinue  (1244336, 0, ...
 01176   280   NtContinue  (1244336, 0, ...
 01177   280   NtContinue  (1244336, 0, ...
 01178   280   NtContinue  (1244336, 0, ...
 01179   280   NtContinue  (1244336, 0, ...
 01180   280   NtContinue  (1244336, 0, ...
 01181   280   NtContinue  (1244336, 0, ...
 01182   280   NtContinue  (1244336, 0, ...
 01183   280   NtContinue  (1244336, 0, ...
 01184   280   NtContinue  (1244336, 0, ...
 01185   280   NtContinue  (1244336, 0, ...
 01186   280   NtContinue  (1244336, 0, ...
 01187   280   NtContinue  (1244336, 0, ...
 01188   280   NtContinue  (1244336, 0, ...
 01189   280   NtContinue  (1244336, 0, ...
 01190   280   NtContinue  (1244336, 0, ...
 01191   280   NtContinue  (1244336, 0, ...
 01192   280   NtContinue  (1244336, 0, ...
 01193   280   NtContinue  (1244336, 0, ...
 01194   280   NtContinue  (1244336, 0, ...
 01195   280   NtContinue  (1244336, 0, ...
 01196   280   NtContinue  (1244336, 0, ...
 01197   280   NtContinue  (1244336, 0, ...
 01198   280   NtContinue  (1244336, 0, ...
 01199   280   NtContinue  (1244336, 0, ...
 01200   280   NtContinue  (1244336, 0, ...
 01201   280   NtContinue  (1244336, 0, ...
 01202   280   NtContinue  (1244336, 0, ...
 01203   280   NtContinue  (1244336, 0, ...
 01204   280   NtContinue  (1244336, 0, ...
 01205   280   NtContinue  (1244336, 0, ...
 01206   280   NtContinue  (1244336, 0, ...
 01207   280   NtContinue  (1244336, 0, ...
 01208   280   NtContinue  (1244336, 0, ...
 01209   280   NtContinue  (1244336, 0, ...
 01210   280   NtContinue  (1244336, 0, ...
 01211   280   NtContinue  (1244336, 0, ...
 01212   280   NtContinue  (1244336, 0, ...
 01213   280   NtContinue  (1244336, 0, ...
 01214   280   NtContinue  (1244336, 0, ...
 01215   280   NtContinue  (1244336, 0, ...
 01216   280   NtContinue  (1244336, 0, ...
 01217   280   NtContinue  (1244336, 0, ...
 01218   280   NtContinue  (1244336, 0, ...
 01219   280   NtContinue  (1244336, 0, ...
 01220   280   NtContinue  (1244336, 0, ...
 01221   280   NtContinue  (1244336, 0, ...
 01222   280   NtContinue  (1244336, 0, ...
 01223   280   NtContinue  (1244336, 0, ...
 01224   280   NtContinue  (1244336, 0, ...
 01225   280   NtContinue  (1244336, 0, ...
 01226   280   NtContinue  (1244336, 0, ...
 01227   280   NtContinue  (1244336, 0, ...
 01228   280   NtContinue  (1244336, 0, ...
 01229   280   NtContinue  (1244336, 0, ...
 01230   280   NtContinue  (1244336, 0, ...
 01231   280   NtContinue  (1244336, 0, ...
 01232   280   NtContinue  (1244336, 0, ...
 01233   280   NtContinue  (1244336, 0, ...
 01234   280   NtContinue  (1244336, 0, ...
 01235   280   NtContinue  (1244336, 0, ...
 01236   280   NtContinue  (1244336, 0, ...
 01237   280   NtContinue  (1244336, 0, ...
 01238   280   NtContinue  (1244336, 0, ...
 01239   280   NtContinue  (1244336, 0, ...
 01240   280   NtContinue  (1244336, 0, ...
 01241   280   NtContinue  (1244336, 0, ...
 01242   280   NtContinue  (1244336, 0, ...
 01243   280   NtContinue  (1244336, 0, ...
 01244   280   NtContinue  (1244336, 0, ...
 01245   280   NtContinue  (1244336, 0, ...
 01246   280   NtContinue  (1244336, 0, ...
 01247   280   NtContinue  (1244336, 0, ...
 01248   280   NtContinue  (1244336, 0, ...
 01249   280   NtContinue  (1244336, 0, ...
 01250   280   NtContinue  (1244336, 0, ...
 01251   280   NtContinue  (1244336, 0, ...
 01252   280   NtContinue  (1244336, 0, ...
 01253   280   NtContinue  (1244336, 0, ...
 01254   280   NtContinue  (1244336, 0, ...
 01255   280   NtContinue  (1244336, 0, ...
 01256   280   NtContinue  (1244336, 0, ...
 01257   280   NtContinue  (1244336, 0, ...
 01258   280   NtContinue  (1244336, 0, ...
 01259   280   NtContinue  (1244336, 0, ...
 01260   280   NtContinue  (1244336, 0, ...
 01261   280   NtContinue  (1244336, 0, ...
 01262   280   NtContinue  (1244336, 0, ...
 01263   280   NtContinue  (1244336, 0, ...
 01264   280   NtContinue  (1244336, 0, ...
 01265   280   NtContinue  (1244336, 0, ...
 01266   280   NtContinue  (1244336, 0, ...
 01267   280   NtContinue  (1244336, 0, ...
 01268   280   NtContinue  (1244336, 0, ...
 01269   280   NtContinue  (1244336, 0, ...
 01270   280   NtContinue  (1244336, 0, ...
 01271   280   NtContinue  (1244336, 0, ...
 01272   280   NtContinue  (1244336, 0, ...
 01273   280   NtContinue  (1244336, 0, ...
 01274   280   NtContinue  (1244336, 0, ...
 01275   280   NtContinue  (1244336, 0, ...
 01276   280   NtContinue  (1244336, 0, ...
 01277   280   NtContinue  (1244336, 0, ...
 01278   280   NtContinue  (1244336, 0, ...
 01279   280   NtContinue  (1244336, 0, ...
 01280   280   NtContinue  (1244336, 0, ...
 01281   280   NtContinue  (1244336, 0, ...
 01282   280   NtContinue  (1244336, 0, ...
 01283   280   NtContinue  (1244336, 0, ...
 01284   280   NtContinue  (1244336, 0, ...
 01285   280   NtContinue  (1244336, 0, ...
 01286   280   NtContinue  (1244336, 0, ...
 01287   280   NtContinue  (1244336, 0, ...
 01288   280   NtContinue  (1244336, 0, ...
 01289   280   NtContinue  (1244336, 0, ...
 01290   280   NtContinue  (1244336, 0, ...
 01291   280   NtContinue  (1244336, 0, ...
 01292   280   NtContinue  (1244336, 0, ...
 01293   280   NtContinue  (1244336, 0, ...
 01294   280   NtContinue  (1244336, 0, ...
 01295   280   NtContinue  (1244336, 0, ...
 01296   280   NtContinue  (1244336, 0, ...
 01297   280   NtContinue  (1244336, 0, ...
 01298   280   NtContinue  (1244336, 0, ...
 01299   280   NtContinue  (1244336, 0, ...
 01300   280   NtContinue  (1244336, 0, ...
 01301   280   NtContinue  (1244336, 0, ...
 01302   280   NtContinue  (1244336, 0, ...
 01303   280   NtContinue  (1244336, 0, ...
 01304   280   NtContinue  (1244336, 0, ...
 01305   280   NtContinue  (1244336, 0, ...
 01306   280   NtContinue  (1244336, 0, ...
 01307   280   NtContinue  (1244336, 0, ...
 01308   280   NtContinue  (1244336, 0, ...
 01309   280   NtContinue  (1244336, 0, ...
 01310   280   NtContinue  (1244336, 0, ...
 01311   280   NtContinue  (1244336, 0, ...
 01312   280   NtContinue  (1244336, 0, ...
 01313   280   NtContinue  (1244336, 0, ...
 01314   280   NtContinue  (1244336, 0, ...
 01315   280   NtContinue  (1244336, 0, ...
 01316   280   NtContinue  (1244336, 0, ...
 01317   280   NtContinue  (1244336, 0, ...
 01318   280   NtContinue  (1244336, 0, ...
 01319   280   NtContinue  (1244336, 0, ...
 01320   280   NtContinue  (1244336, 0, ...
 01321   280   NtContinue  (1244336, 0, ...
 01322   280   NtContinue  (1244336, 0, ...
 01323   280   NtContinue  (1244336, 0, ...
 01324   280   NtContinue  (1244336, 0, ...
 01325   280   NtContinue  (1244336, 0, ...
 01326   280   NtContinue  (1244336, 0, ...
 01327   280   NtContinue  (1244336, 0, ...
 01328   280   NtContinue  (1244336, 0, ...
 01329   280   NtContinue  (1244336, 0, ...
 01330   280   NtContinue  (1244336, 0, ...
 01331   280   NtContinue  (1244336, 0, ...
 01332   280   NtContinue  (1244336, 0, ...
 01333   280   NtContinue  (1244336, 0, ...
 01334   280   NtContinue  (1244336, 0, ...
 01335   280   NtContinue  (1244336, 0, ...
 01336   280   NtContinue  (1244336, 0, ...
 01337   280   NtContinue  (1244336, 0, ...
 01338   280   NtContinue  (1244336, 0, ...
 01339   280   NtContinue  (1244336, 0, ...
 01340   280   NtContinue  (1244336, 0, ...
 01341   280   NtContinue  (1244336, 0, ...
 01342   280   NtContinue  (1244336, 0, ...
 01343   280   NtContinue  (1244336, 0, ...
 01344   280   NtContinue  (1244336, 0, ...
 01345   280   NtContinue  (1244336, 0, ...
 01346   280   NtContinue  (1244336, 0, ...
 01347   280   NtContinue  (1244336, 0, ...
 01348   280   NtContinue  (1244336, 0, ...
 01349   280   NtContinue  (1244336, 0, ...
 01350   280   NtContinue  (1244336, 0, ...
 01351   280   NtContinue  (1244336, 0, ...
 01352   280   NtContinue  (1244336, 0, ...
 01353   280   NtContinue  (1244336, 0, ...
 01354   280   NtContinue  (1244336, 0, ...
 01355   280   NtContinue  (1244336, 0, ...
 01356   280   NtContinue  (1244336, 0, ...
 01357   280   NtContinue  (1244336, 0, ...
 01358   280   NtContinue  (1244336, 0, ...
 01359   280   NtContinue  (1244336, 0, ...
 01360   280   NtContinue  (1244336, 0, ...
 01361   280   NtContinue  (1244336, 0, ...
 01362   280   NtContinue  (1244336, 0, ...
 01363   280   NtContinue  (1244336, 0, ...
 01364   280   NtContinue  (1244336, 0, ...
 01365   280   NtContinue  (1244336, 0, ...
 01366   280   NtContinue  (1244336, 0, ...
 01367   280   NtContinue  (1244336, 0, ...
 01368   280   NtContinue  (1244336, 0, ...
 01369   280   NtContinue  (1244336, 0, ...
 01370   280   NtContinue  (1244336, 0, ...
 01371   280   NtContinue  (1244336, 0, ...
 01372   280   NtContinue  (1244336, 0, ...
 01373   280   NtContinue  (1244336, 0, ...
 01374   280   NtContinue  (1244336, 0, ...
 01375   280   NtContinue  (1244336, 0, ...
 01376   280   NtContinue  (1244336, 0, ...
 01377   280   NtContinue  (1244336, 0, ...
 01378   280   NtContinue  (1244336, 0, ...
 01379   280   NtContinue  (1244336, 0, ...
 01380   280   NtContinue  (1244336, 0, ...
 01381   280   NtContinue  (1244336, 0, ...
 01382   280   NtContinue  (1244336, 0, ...
 01383   280   NtContinue  (1244336, 0, ...
 01384   280   NtContinue  (1244336, 0, ...
 01385   280   NtContinue  (1244336, 0, ...
 01386   280   NtContinue  (1244336, 0, ...
 01387   280   NtContinue  (1244336, 0, ...
 01388   280   NtContinue  (1244336, 0, ...
 01389   280   NtContinue  (1244336, 0, ...
 01390   280   NtContinue  (1244336, 0, ...
 01391   280   NtContinue  (1244336, 0, ...
 01392   280   NtContinue  (1244336, 0, ...
 01393   280   NtContinue  (1244336, 0, ...
 01394   280   NtContinue  (1244336, 0, ...
 01395   280   NtContinue  (1244336, 0, ...
 01396   280   NtContinue  (1244336, 0, ...
 01397   280   NtContinue  (1244336, 0, ...
 01398   280   NtContinue  (1244336, 0, ...
 01399   280   NtContinue  (1244336, 0, ...
 01400   280   NtContinue  (1244336, 0, ...
 01401   280   NtContinue  (1244336, 0, ...
 01402   280   NtContinue  (1244336, 0, ...
 01403   280   NtContinue  (1244336, 0, ...
 01404   280   NtContinue  (1244336, 0, ...
 01405   280   NtContinue  (1244336, 0, ...
 01406   280   NtContinue  (1244336, 0, ...
 01407   280   NtContinue  (1244336, 0, ...
 01408   280   NtContinue  (1244336, 0, ...
 01409   280   NtContinue  (1244336, 0, ...
 01410   280   NtContinue  (1244336, 0, ...
 01411   280   NtContinue  (1244336, 0, ...
 01412   280   NtContinue  (1244336, 0, ...
 01413   280   NtContinue  (1244336, 0, ...
 01414   280   NtContinue  (1244336, 0, ...
 01415   280   NtContinue  (1244336, 0, ...
 01416   280   NtContinue  (1244336, 0, ...
 01417   280   NtContinue  (1244336, 0, ...
 01418   280   NtContinue  (1244336, 0, ...
 01419   280   NtContinue  (1244336, 0, ...
 01420   280   NtContinue  (1244336, 0, ...
 01421   280   NtContinue  (1244336, 0, ...
 01422   280   NtContinue  (1244336, 0, ...
 01423   280   NtContinue  (1244336, 0, ...
 01424   280   NtContinue  (1244336, 0, ...
 01425   280   NtContinue  (1244336, 0, ...
 01426   280   NtContinue  (1244336, 0, ...
 01427   280   NtContinue  (1244336, 0, ...
 01428   280   NtContinue  (1244336, 0, ...
 01429   280   NtContinue  (1244336, 0, ...
 01430   280   NtContinue  (1244336, 0, ...
 01431   280   NtContinue  (1244336, 0, ...
 01432   280   NtContinue  (1244336, 0, ...
 01433   280   NtContinue  (1244336, 0, ...
 01434   280   NtContinue  (1244336, 0, ...
 01435   280   NtContinue  (1244336, 0, ...
 01436   280   NtContinue  (1244336, 0, ...
 01437   280   NtContinue  (1244336, 0, ...
 01438   280   NtContinue  (1244336, 0, ...
 01439   280   NtContinue  (1244336, 0, ...
 01440   280   NtContinue  (1244336, 0, ...
 01441   280   NtContinue  (1244336, 0, ...
 01442   280   NtContinue  (1244336, 0, ...
 01443   280   NtContinue  (1244336, 0, ...
 01444   280   NtContinue  (1244336, 0, ...
 01445   280   NtContinue  (1244336, 0, ...
 01446   280   NtContinue  (1244336, 0, ...
 01447   280   NtContinue  (1244336, 0, ...
 01448   280   NtContinue  (1244336, 0, ...
 01449   280   NtContinue  (1244336, 0, ...
 01450   280   NtContinue  (1244336, 0, ...
 01451   280   NtContinue  (1244336, 0, ...
 01452   280   NtContinue  (1244336, 0, ...
 01453   280   NtContinue  (1244336, 0, ...
 01454   280   NtContinue  (1244336, 0, ...
 01455   280   NtContinue  (1244336, 0, ...
 01456   280   NtContinue  (1244336, 0, ...
 01457   280   NtContinue  (1244336, 0, ...
 01458   280   NtContinue  (1244336, 0, ...
 01459   280   NtContinue  (1244336, 0, ...
 01460   280   NtContinue  (1244336, 0, ...
 01461   280   NtContinue  (1244336, 0, ...
 01462   280   NtContinue  (1244336, 0, ...
 01463   280   NtContinue  (1244336, 0, ...
 01464   280   NtContinue  (1244336, 0, ...
 01465   280   NtContinue  (1244336, 0, ...
 01466   280   NtContinue  (1244336, 0, ...
 01467   280   NtContinue  (1244336, 0, ...
 01468   280   NtContinue  (1244336, 0, ...
 01469   280   NtContinue  (1244336, 0, ...
 01470   280   NtContinue  (1244336, 0, ...
 01471   280   NtContinue  (1244336, 0, ...
 01472   280   NtContinue  (1244336, 0, ...
 01473   280   NtContinue  (1244336, 0, ...
 01474   280   NtContinue  (1244336, 0, ...
 01475   280   NtContinue  (1244336, 0, ...
 01476   280   NtContinue  (1244336, 0, ...
 01477   280   NtContinue  (1244336, 0, ...
 01478   280   NtContinue  (1244336, 0, ...
 01479   280   NtContinue  (1244336, 0, ...
 01480   280   NtContinue  (1244336, 0, ...
 01481   280   NtContinue  (1244336, 0, ...
 01482   280   NtContinue  (1244336, 0, ...
 01483   280   NtContinue  (1244336, 0, ...
 01484   280   NtContinue  (1244336, 0, ...
 01485   280   NtContinue  (1244336, 0, ...
 01486   280   NtContinue  (1244336, 0, ...
 01487   280   NtContinue  (1244336, 0, ...
 01488   280   NtContinue  (1244336, 0, ...
 01489   280   NtContinue  (1244336, 0, ...
 01490   280   NtContinue  (1244336, 0, ...
 01491   280   NtContinue  (1244336, 0, ...
 01492   280   NtContinue  (1244336, 0, ...
 01493   280   NtContinue  (1244336, 0, ...
 01494   280   NtContinue  (1244336, 0, ...
 01495   280   NtContinue  (1244336, 0, ...
 01496   280   NtContinue  (1244336, 0, ...
 01497   280   NtContinue  (1244336, 0, ...
 01498   280   NtContinue  (1244336, 0, ...
 01499   280   NtContinue  (1244336, 0, ...
 01500   280   NtContinue  (1244336, 0, ...
 01501   280   NtContinue  (1244336, 0, ...
 01502   280   NtContinue  (1244336, 0, ...
 01503   280   NtContinue  (1244336, 0, ...
 01504   280   NtContinue  (1244336, 0, ...
 01505   280   NtContinue  (1244336, 0, ...
 01506   280   NtContinue  (1244336, 0, ...
 01507   280   NtContinue  (1244336, 0, ...
 01508   280   NtContinue  (1244336, 0, ...
 01509   280   NtContinue  (1244336, 0, ...
 01510   280   NtContinue  (1244336, 0, ...
 01511   280   NtContinue  (1244336, 0, ...
 01512   280   NtContinue  (1244336, 0, ...
 01513   280   NtContinue  (1244336, 0, ...
 01514   280   NtContinue  (1244336, 0, ...
 01515   280   NtContinue  (1244336, 0, ...
 01516   280   NtContinue  (1244336, 0, ...
 01517   280   NtContinue  (1244336, 0, ...
 01518   280   NtContinue  (1244336, 0, ...
 01519   280   NtContinue  (1244336, 0, ...
 01520   280   NtContinue  (1244336, 0, ...
 01521   280   NtContinue  (1244336, 0, ...
 01522   280   NtContinue  (1244336, 0, ...
 01523   280   NtContinue  (1244336, 0, ...
 01524   280   NtContinue  (1244336, 0, ...
 01525   280   NtContinue  (1244336, 0, ...
 01526   280   NtContinue  (1244336, 0, ...
 01527   280   NtContinue  (1244336, 0, ...
 01528   280   NtContinue  (1244336, 0, ...
 01529   280   NtContinue  (1244336, 0, ...
 01530   280   NtContinue  (1244336, 0, ...
 01531   280   NtContinue  (1244336, 0, ...
 01532   280   NtContinue  (1244336, 0, ...
 01533   280   NtContinue  (1244336, 0, ...
 01534   280   NtContinue  (1244336, 0, ...
 01535   280   NtContinue  (1244336, 0, ...
 01536   280   NtContinue  (1244336, 0, ...
 01537   280   NtContinue  (1244336, 0, ...
 01538   280   NtContinue  (1244336, 0, ...
 01539   280   NtContinue  (1244336, 0, ...
 01540   280   NtContinue  (1244336, 0, ...
 01541   280   NtContinue  (1244336, 0, ...
 01542   280   NtContinue  (1244336, 0, ...
 01543   280   NtContinue  (1244336, 0, ...
 01544   280   NtContinue  (1244336, 0, ...
 01545   280   NtContinue  (1244336, 0, ...
 01546   280   NtContinue  (1244336, 0, ...
 01547   280   NtContinue  (1244336, 0, ...
 01548   280   NtContinue  (1244336, 0, ...
 01549   280   NtContinue  (1244336, 0, ...
 01550   280   NtContinue  (1244336, 0, ...
 01551   280   NtContinue  (1244336, 0, ...
 01552   280   NtContinue  (1244336, 0, ...
 01553   280   NtContinue  (1244336, 0, ...
 01554   280   NtContinue  (1244336, 0, ...
 01555   280   NtContinue  (1244336, 0, ...
 01556   280   NtContinue  (1244336, 0, ...
 01557   280   NtContinue  (1244336, 0, ...
 01558   280   NtContinue  (1244336, 0, ...
 01559   280   NtContinue  (1244336, 0, ...
 01560   280   NtContinue  (1244336, 0, ...
 01561   280   NtContinue  (1244336, 0, ...
 01562   280   NtContinue  (1244336, 0, ...
 01563   280   NtContinue  (1244336, 0, ...
 01564   280   NtContinue  (1244336, 0, ...
 01565   280   NtContinue  (1244336, 0, ...
 01566   280   NtContinue  (1244336, 0, ...
 01567   280   NtContinue  (1244336, 0, ...
 01568   280   NtContinue  (1244336, 0, ...
 01569   280   NtContinue  (1244336, 0, ...
 01570   280   NtContinue  (1244336, 0, ...
 01571   280   NtContinue  (1244336, 0, ...
 01572   280   NtContinue  (1244336, 0, ...
 01573   280   NtContinue  (1244336, 0, ...
 01574   280   NtContinue  (1244336, 0, ...
 01575   280   NtContinue  (1244336, 0, ...
 01576   280   NtContinue  (1244336, 0, ...
 01577   280   NtContinue  (1244336, 0, ...
 01578   280   NtContinue  (1244336, 0, ...
 01579   280   NtContinue  (1244336, 0, ...
 01580   280   NtContinue  (1244336, 0, ...
 01581   280   NtContinue  (1244336, 0, ...
 01582   280   NtContinue  (1244336, 0, ...
 01583   280   NtContinue  (1244336, 0, ...
 01584   280   NtContinue  (1244336, 0, ...
 01585   280   NtContinue  (1244336, 0, ...
 01586   280   NtContinue  (1244336, 0, ...
 01587   280   NtContinue  (1244336, 0, ...
 01588   280   NtContinue  (1244336, 0, ...
 01589   280   NtContinue  (1244336, 0, ...
 01590   280   NtContinue  (1244336, 0, ...
 01591   280   NtContinue  (1244336, 0, ...
 01592   280   NtContinue  (1244336, 0, ...
 01593   280   NtContinue  (1244336, 0, ...
 01594   280   NtContinue  (1244336, 0, ...
 01595   280   NtContinue  (1244336, 0, ...
 01596   280   NtContinue  (1244336, 0, ...
 01597   280   NtContinue  (1244336, 0, ...
 01598   280   NtContinue  (1244336, 0, ...
 01599   280   NtContinue  (1244336, 0, ...
 01600   280   NtContinue  (1244336, 0, ...
 01601   280   NtContinue  (1244336, 0, ...
 01602   280   NtContinue  (1244336, 0, ...
 01603   280   NtContinue  (1244336, 0, ...
 01604   280   NtContinue  (1244336, 0, ...
 01605   280   NtContinue  (1244336, 0, ...
 01606   280   NtContinue  (1244336, 0, ...
 01607   280   NtContinue  (1244336, 0, ...
 01608   280   NtContinue  (1244336, 0, ...
 01609   280   NtContinue  (1244336, 0, ...
 01610   280   NtContinue  (1244336, 0, ...
 01611   280   NtContinue  (1244336, 0, ...
 01612   280   NtContinue  (1244336, 0, ...
 01613   280   NtContinue  (1244336, 0, ...
 01614   280   NtContinue  (1244336, 0, ...
 01615   280   NtContinue  (1244336, 0, ...
 01616   280   NtContinue  (1244336, 0, ...
 01617   280   NtContinue  (1244336, 0, ...
 01618   280   NtContinue  (1244336, 0, ...
 01619   280   NtContinue  (1244336, 0, ...
 01620   280   NtContinue  (1244336, 0, ...
 01621   280   NtContinue  (1244336, 0, ...
 01622   280   NtContinue  (1244336, 0, ...
 01623   280   NtContinue  (1244336, 0, ...
 01624   280   NtContinue  (1244336, 0, ...
 01625   280   NtContinue  (1244336, 0, ...
 01626   280   NtContinue  (1244336, 0, ...
 01627   280   NtContinue  (1244336, 0, ...
 01628   280   NtContinue  (1244336, 0, ...
 01629   280   NtContinue  (1244336, 0, ...
 01630   280   NtContinue  (1244336, 0, ...
 01631   280   NtContinue  (1244336, 0, ...
 01632   280   NtContinue  (1244336, 0, ...
 01633   280   NtContinue  (1244336, 0, ...
 01634   280   NtContinue  (1244336, 0, ...
 01635   280   NtContinue  (1244336, 0, ...
 01636   280   NtContinue  (1244336, 0, ...
 01637   280   NtContinue  (1244336, 0, ...
 01638   280   NtContinue  (1244336, 0, ...
 01639   280   NtContinue  (1244336, 0, ...
 01640   280   NtContinue  (1244336, 0, ...
 01641   280   NtContinue  (1244336, 0, ...
 01642   280   NtContinue  (1244336, 0, ...
 01643   280   NtContinue  (1244336, 0, ...
 01644   280   NtContinue  (1244336, 0, ...
 01645   280   NtContinue  (1244336, 0, ...
 01646   280   NtContinue  (1244336, 0, ...
 01647   280   NtContinue  (1244336, 0, ...
 01648   280   NtContinue  (1244336, 0, ...
 01649   280   NtContinue  (1244336, 0, ...
 01650   280   NtContinue  (1244336, 0, ...
 01651   280   NtContinue  (1244336, 0, ...
 01652   280   NtContinue  (1244336, 0, ...
 01653   280   NtContinue  (1244336, 0, ...
 01654   280   NtContinue  (1244336, 0, ...
 01655   280   NtContinue  (1244336, 0, ...
 01656   280   NtContinue  (1244336, 0, ...
 01657   280   NtContinue  (1244336, 0, ...
 01658   280   NtContinue  (1244336, 0, ...
 01659   280   NtContinue  (1244336, 0, ...
 01660   280   NtContinue  (1244336, 0, ...
 01661   280   NtContinue  (1244336, 0, ...
 01662   280   NtContinue  (1244336, 0, ...
 01663   280   NtContinue  (1244336, 0, ...
 01664   280   NtContinue  (1244336, 0, ...
 01665   280   NtContinue  (1244336, 0, ...
 01666   280   NtContinue  (1244336, 0, ...
 01667   280   NtContinue  (1244336, 0, ...
 01668   280   NtContinue  (1244336, 0, ...
 01669   280   NtContinue  (1244336, 0, ...
 01670   280   NtContinue  (1244336, 0, ...
 01671   280   NtContinue  (1244336, 0, ...
 01672   280   NtContinue  (1244336, 0, ...
 01673   280   NtContinue  (1244336, 0, ...
 01674   280   NtContinue  (1244336, 0, ...
 01675   280   NtContinue  (1244336, 0, ...
 01676   280   NtContinue  (1244336, 0, ...
 01677   280   NtContinue  (1244336, 0, ...
 01678   280   NtContinue  (1244336, 0, ...
 01679   280   NtContinue  (1244336, 0, ...
 01680   280   NtContinue  (1244336, 0, ...
 01681   280   NtContinue  (1244336, 0, ...
 01682   280   NtContinue  (1244336, 0, ...
 01683   280   NtContinue  (1244336, 0, ...
 01684   280   NtContinue  (1244336, 0, ...
 01685   280   NtContinue  (1244336, 0, ...
 01686   280   NtContinue  (1244336, 0, ...
 01687   280   NtContinue  (1244336, 0, ...
 01688   280   NtContinue  (1244336, 0, ...
 01689   280   NtContinue  (1244336, 0, ...
 01690   280   NtContinue  (1244336, 0, ...
 01691   280   NtContinue  (1244336, 0, ...
 01692   280   NtContinue  (1244336, 0, ...
 01693   280   NtContinue  (1244336, 0, ...
 01694   280   NtContinue  (1244336, 0, ...
 01695   280   NtContinue  (1244336, 0, ...
 01696   280   NtContinue  (1244336, 0, ...
 01697   280   NtContinue  (1244336, 0, ...
 01698   280   NtContinue  (1244336, 0, ...
 01699   280   NtContinue  (1244336, 0, ...
 01700   280   NtContinue  (1244336, 0, ...
 01701   280   NtContinue  (1244336, 0, ...
 01702   280   NtContinue  (1244336, 0, ...
 01703   280   NtContinue  (1244336, 0, ...
 01704   280   NtContinue  (1244336, 0, ...
 01705   280   NtContinue  (1244336, 0, ...
 01706   280   NtContinue  (1244336, 0, ...
 01707   280   NtContinue  (1244336, 0, ...
 01708   280   NtContinue  (1244336, 0, ...
 01709   280   NtContinue  (1244336, 0, ...
 01710   280   NtContinue  (1244336, 0, ...
 01711   280   NtContinue  (1244336, 0, ...
 01712   280   NtContinue  (1244336, 0, ...
 01713   280   NtContinue  (1244336, 0, ...
 01714   280   NtContinue  (1244336, 0, ...
 01715   280   NtContinue  (1244336, 0, ...
 01716   280   NtContinue  (1244336, 0, ...
 01717   280   NtContinue  (1244336, 0, ...
 01718   280   NtContinue  (1244336, 0, ...
 01719   280   NtContinue  (1244336, 0, ...
 01720   280   NtContinue  (1244336, 0, ...
 01721   280   NtContinue  (1244336, 0, ...
 01722   280   NtContinue  (1244336, 0, ...
 01723   280   NtContinue  (1244336, 0, ...
 01724   280   NtContinue  (1244336, 0, ...
 01725   280   NtContinue  (1244336, 0, ...
 01726   280   NtContinue  (1244336, 0, ...
 01727   280   NtContinue  (1244336, 0, ...
 01728   280   NtContinue  (1244336, 0, ...
 01729   280   NtContinue  (1244336, 0, ...
 01730   280   NtContinue  (1244336, 0, ...
 01731   280   NtContinue  (1244336, 0, ...
 01732   280   NtContinue  (1244336, 0, ...
 01733   280   NtContinue  (1244336, 0, ...
 01734   280   NtContinue  (1244336, 0, ...
 01735   280   NtContinue  (1244336, 0, ...
 01736   280   NtContinue  (1244336, 0, ...
 01737   280   NtContinue  (1244336, 0, ...
 01738   280   NtContinue  (1244336, 0, ...
 01739   280   NtContinue  (1244336, 0, ...
 01740   280   NtContinue  (1244336, 0, ...
 01741   280   NtContinue  (1244336, 0, ...
 01742   280   NtContinue  (1244336, 0, ...
 01743   280   NtContinue  (1244336, 0, ...
 01744   280   NtContinue  (1244336, 0, ...
 01745   280   NtContinue  (1244336, 0, ...
 01746   280   NtContinue  (1244336, 0, ...
 01747   280   NtContinue  (1244336, 0, ...
 01748   280   NtContinue  (1244336, 0, ...
 01749   280   NtContinue  (1244336, 0, ...
 01750   280   NtContinue  (1244336, 0, ...
 01751   280   NtContinue  (1244336, 0, ...
 01752   280   NtContinue  (1244336, 0, ...
 01753   280   NtContinue  (1244336, 0, ...
 01754   280   NtContinue  (1244336, 0, ...
 01755   280   NtContinue  (1244336, 0, ...
 01756   280   NtContinue  (1244336, 0, ...
 01757   280   NtContinue  (1244336, 0, ...
 01758   280   NtContinue  (1244336, 0, ...
 01759   280   NtContinue  (1244336, 0, ...
 01760   280   NtContinue  (1244336, 0, ...
 01761   280   NtContinue  (1244336, 0, ...
 01762   280   NtContinue  (1244336, 0, ...
 01763   280   NtContinue  (1244336, 0, ...
 01764   280   NtContinue  (1244336, 0, ...
 01765   280   NtContinue  (1244336, 0, ...
 01766   280   NtContinue  (1244336, 0, ...
 01767   280   NtContinue  (1244336, 0, ...
 01768   280   NtContinue  (1244336, 0, ...
 01769   280   NtContinue  (1244336, 0, ...
 01770   280   NtContinue  (1244336, 0, ...
 01771   280   NtContinue  (1244336, 0, ...
 01772   280   NtContinue  (1244336, 0, ...
 01773   280   NtContinue  (1244336, 0, ...
 01774   280   NtContinue  (1244336, 0, ...
 01775   280   NtContinue  (1244336, 0, ...
 01776   280   NtContinue  (1244336, 0, ...
 01777   280   NtContinue  (1244336, 0, ...
 01778   280   NtContinue  (1244336, 0, ...
 01779   280   NtContinue  (1244336, 0, ...
 01780   280   NtContinue  (1244336, 0, ...
 01781   280   NtContinue  (1244336, 0, ...
 01782   280   NtContinue  (1244336, 0, ...
 01783   280   NtContinue  (1244336, 0, ...
 01784   280   NtContinue  (1244336, 0, ...
 01785   280   NtContinue  (1244336, 0, ...
 01786   280   NtContinue  (1244336, 0, ...
 01787   280   NtContinue  (1244336, 0, ...
 01788   280   NtContinue  (1244336, 0, ...
 01789   280   NtContinue  (1244336, 0, ...
 01790   280   NtContinue  (1244336, 0, ...
 01791   280   NtContinue  (1244336, 0, ...
 01792   280   NtContinue  (1244336, 0, ...
 01793   280   NtContinue  (1244336, 0, ...
 01794   280   NtContinue  (1244336, 0, ...
 01795   280   NtContinue  (1244336, 0, ...
 01796   280   NtContinue  (1244336, 0, ...
 01797   280   NtContinue  (1244336, 0, ...
 01798   280   NtContinue  (1244336, 0, ...
 01799   280   NtContinue  (1244336, 0, ...
 01800   280   NtContinue  (1244336, 0, ...
 01801   280   NtContinue  (1244336, 0, ...
 01802   280   NtContinue  (1244336, 0, ...
 01803   280   NtContinue  (1244336, 0, ...
 01804   280   NtContinue  (1244336, 0, ...
 01805   280   NtContinue  (1244336, 0, ...
 01806   280   NtContinue  (1244336, 0, ...
 01807   280   NtContinue  (1244336, 0, ...
 01808   280   NtContinue  (1244336, 0, ...
 01809   280   NtContinue  (1244336, 0, ...
 01810   280   NtContinue  (1244336, 0, ...
 01811   280   NtContinue  (1244336, 0, ...
 01812   280   NtContinue  (1244336, 0, ...
 01813   280   NtContinue  (1244336, 0, ...
 01814   280   NtContinue  (1244336, 0, ...
 01815   280   NtContinue  (1244336, 0, ...
 01816   280   NtContinue  (1244336, 0, ...
 01817   280   NtContinue  (1244336, 0, ...
 01818   280   NtContinue  (1244336, 0, ...
 01819   280   NtContinue  (1244336, 0, ...
 01820   280   NtContinue  (1244336, 0, ...
 01821   280   NtContinue  (1244336, 0, ...
 01822   280   NtContinue  (1244336, 0, ...
 01823   280   NtContinue  (1244336, 0, ...
 01824   280   NtContinue  (1244336, 0, ...
 01825   280   NtContinue  (1244336, 0, ...
 01826   280   NtContinue  (1244336, 0, ...
 01827   280   NtContinue  (1244336, 0, ...
 01828   280   NtContinue  (1244336, 0, ...
 01829   280   NtContinue  (1244336, 0, ...
 01830   280   NtContinue  (1244336, 0, ...
 01831   280   NtContinue  (1244336, 0, ...
 01832   280   NtContinue  (1244336, 0, ...
 01833   280   NtContinue  (1244336, 0, ...
 01834   280   NtContinue  (1244336, 0, ...
 01835   280   NtContinue  (1244336, 0, ...
 01836   280   NtContinue  (1244336, 0, ...
 01837   280   NtContinue  (1244336, 0, ...
 01838   280   NtContinue  (1244336, 0, ...
 01839   280   NtContinue  (1244336, 0, ...
 01840   280   NtContinue  (1244336, 0, ...
 01841   280   NtContinue  (1244336, 0, ...
 01842   280   NtContinue  (1244336, 0, ...
 01843   280   NtContinue  (1244336, 0, ...
 01844   280   NtContinue  (1244336, 0, ...
 01845   280   NtContinue  (1244336, 0, ...
 01846   280   NtContinue  (1244336, 0, ...
 01847   280   NtContinue  (1244336, 0, ...
 01848   280   NtContinue  (1244336, 0, ...
 01849   280   NtContinue  (1244336, 0, ...
 01850   280   NtContinue  (1244336, 0, ...
 01851   280   NtContinue  (1244336, 0, ...
 01852   280   NtContinue  (1244336, 0, ...
 01853   280   NtContinue  (1244336, 0, ...
 01854   280   NtContinue  (1244336, 0, ...
 01855   280   NtContinue  (1244336, 0, ...
 01856   280   NtContinue  (1244336, 0, ...
 01857   280   NtContinue  (1244336, 0, ...
 01858   280   NtContinue  (1244336, 0, ...
 01859   280   NtContinue  (1244336, 0, ...
 01860   280   NtContinue  (1244336, 0, ...
 01861   280   NtContinue  (1244336, 0, ...
 01862   280   NtContinue  (1244336, 0, ...
 01863   280   NtContinue  (1244336, 0, ...
 01864   280   NtContinue  (1244336, 0, ...
 01865   280   NtContinue  (1244336, 0, ...
 01866   280   NtContinue  (1244336, 0, ...
 01867   280   NtContinue  (1244336, 0, ...
 01868   280   NtContinue  (1244336, 0, ...
 01869   280   NtContinue  (1244336, 0, ...
 01870   280   NtContinue  (1244336, 0, ...
 01871   280   NtContinue  (1244336, 0, ...
 01872   280   NtContinue  (1244336, 0, ...
 01873   280   NtContinue  (1244336, 0, ...
 01874   280   NtContinue  (1244336, 0, ...
 01875   280   NtContinue  (1244336, 0, ...
 01876   280   NtContinue  (1244336, 0, ...
 01877   280   NtContinue  (1244336, 0, ...
 01878   280   NtContinue  (1244336, 0, ...
 01879   280   NtContinue  (1244336, 0, ...
 01880   280   NtContinue  (1244336, 0, ...
 01881   280   NtContinue  (1244336, 0, ...
 01882   280   NtContinue  (1244336, 0, ...
 01883   280   NtContinue  (1244336, 0, ...
 01884   280   NtContinue  (1244336, 0, ...
 01885   280   NtContinue  (1244336, 0, ...
 01886   280   NtContinue  (1244336, 0, ...
 01887   280   NtContinue  (1244336, 0, ...
 01888   280   NtContinue  (1244336, 0, ...
 01889   280   NtContinue  (1244336, 0, ...
 01890   280   NtContinue  (1244336, 0, ...
 01891   280   NtContinue  (1244336, 0, ...
 01892   280   NtContinue  (1244336, 0, ...
 01893   280   NtContinue  (1244336, 0, ...
 01894   280   NtContinue  (1244336, 0, ...
 01895   280   NtContinue  (1244336, 0, ...
 01896   280   NtContinue  (1244336, 0, ...
 01897   280   NtContinue  (1244336, 0, ...
 01898   280   NtContinue  (1244336, 0, ...
 01899   280   NtContinue  (1244336, 0, ...
 01900   280   NtContinue  (1244336, 0, ...
 01901   280   NtContinue  (1244336, 0, ...
 01902   280   NtContinue  (1244336, 0, ...
 01903   280   NtContinue  (1244336, 0, ...
 01904   280   NtContinue  (1244336, 0, ...
 01905   280   NtContinue  (1244336, 0, ...
 01906   280   NtContinue  (1244336, 0, ...
 01907   280   NtContinue  (1244336, 0, ...
 01908   280   NtContinue  (1244336, 0, ...
 01909   280   NtContinue  (1244336, 0, ...
 01910   280   NtContinue  (1244336, 0, ...
 01911   280   NtContinue  (1244336, 0, ...
 01912   280   NtContinue  (1244336, 0, ...
 01913   280   NtContinue  (1244336, 0, ...
 01914   280   NtContinue  (1244336, 0, ...
 01915   280   NtContinue  (1244336, 0, ...
 01916   280   NtContinue  (1244336, 0, ...
 01917   280   NtContinue  (1244336, 0, ...
 01918   280   NtContinue  (1244336, 0, ...
 01919   280   NtContinue  (1244336, 0, ...
 01920   280   NtContinue  (1244336, 0, ...
 01921   280   NtContinue  (1244336, 0, ...
 01922   280   NtContinue  (1244336, 0, ...
 01923   280   NtContinue  (1244336, 0, ...
 01924   280   NtContinue  (1244336, 0, ...
 01925   280   NtContinue  (1244336, 0, ...
 01926   280   NtContinue  (1244336, 0, ...
 01927   280   NtContinue  (1244336, 0, ...
 01928   280   NtContinue  (1244336, 0, ...
 01929   280   NtContinue  (1244336, 0, ...
 01930   280   NtContinue  (1244336, 0, ...
 01931   280   NtContinue  (1244336, 0, ...
 01932   280   NtContinue  (1244336, 0, ...
 01933   280   NtContinue  (1244336, 0, ...
 01934   280   NtContinue  (1244336, 0, ...
 01935   280   NtContinue  (1244336, 0, ...
 01936   280   NtContinue  (1244336, 0, ...
 01937   280   NtContinue  (1244336, 0, ...
 01938   280   NtContinue  (1244336, 0, ...
 01939   280   NtContinue  (1244336, 0, ...
 01940   280   NtContinue  (1244336, 0, ...
 01941   280   NtContinue  (1244336, 0, ...
 01942   280   NtContinue  (1244336, 0, ...
 01943   280   NtContinue  (1244336, 0, ...
 01944   280   NtContinue  (1244336, 0, ...
 01945   280   NtContinue  (1244336, 0, ...
 01946   280   NtContinue  (1244336, 0, ...
 01947   280   NtContinue  (1244336, 0, ...
 01948   280   NtContinue  (1244336, 0, ...
 01949   280   NtContinue  (1244336, 0, ...
 01950   280   NtContinue  (1244336, 0, ...
 01951   280   NtContinue  (1244336, 0, ...
 01952   280   NtContinue  (1244336, 0, ...
 01953   280   NtContinue  (1244336, 0, ...
 01954   280   NtContinue  (1244336, 0, ...
 01955   280   NtContinue  (1244336, 0, ...
 01956   280   NtContinue  (1244336, 0, ...
 01957   280   NtContinue  (1244336, 0, ...
 01958   280   NtContinue  (1244336, 0, ...
 01959   280   NtContinue  (1244336, 0, ...
 01960   280   NtContinue  (1244336, 0, ...
 01961   280   NtContinue  (1244336, 0, ...
 01962   280   NtContinue  (1244336, 0, ...
 01963   280   NtContinue  (1244336, 0, ...
 01964   280   NtContinue  (1244336, 0, ...
 01965   280   NtContinue  (1244336, 0, ...
 01966   280   NtContinue  (1244336, 0, ...
 01967   280   NtContinue  (1244336, 0, ...
 01968   280   NtContinue  (1244336, 0, ...
 01969   280   NtContinue  (1244336, 0, ...
 01970   280   NtContinue  (1244336, 0, ...
 01971   280   NtContinue  (1244336, 0, ...
 01972   280   NtContinue  (1244336, 0, ...
 01973   280   NtContinue  (1244336, 0, ...
 01974   280   NtContinue  (1244336, 0, ...
 01975   280   NtContinue  (1244336, 0, ...
 01976   280   NtContinue  (1244336, 0, ...
 01977   280   NtContinue  (1244336, 0, ...
 01978   280   NtContinue  (1244336, 0, ...
 01979   280   NtContinue  (1244336, 0, ...
 01980   280   NtContinue  (1244336, 0, ...
 01981   280   NtContinue  (1244336, 0, ...
 01982   280   NtContinue  (1244336, 0, ...
 01983   280   NtContinue  (1244336, 0, ...
 01984   280   NtContinue  (1244336, 0, ...
 01985   280   NtContinue  (1244336, 0, ...
 01986   280   NtContinue  (1244336, 0, ...
 01987   280   NtContinue  (1244336, 0, ...
 01988   280   NtContinue  (1244336, 0, ...
 01989   280   NtContinue  (1244336, 0, ...
 01990   280   NtContinue  (1244336, 0, ...
 01991   280   NtContinue  (1244336, 0, ...
 01992   280   NtContinue  (1244336, 0, ...
 01993   280   NtContinue  (1244336, 0, ...
 01994   280   NtContinue  (1244336, 0, ...
 01995   280   NtContinue  (1244336, 0, ...
 01996   280   NtContinue  (1244336, 0, ...
 01997   280   NtContinue  (1244336, 0, ...
 01998   280   NtContinue  (1244336, 0, ...
 01999   280   NtContinue  (1244336, 0, ...
 02000   280   NtContinue  (1244336, 0, ...
 02001   280   NtContinue  (1244336, 0, ...
 02002   280   NtContinue  (1244336, 0, ...
 02003   280   NtContinue  (1244336, 0, ...
 02004   280   NtContinue  (1244336, 0, ...
 02005   280   NtContinue  (1244336, 0, ...
 02006   280   NtContinue  (1244336, 0, ...
 02007   280   NtContinue  (1244336, 0, ...
 02008   280   NtContinue  (1244336, 0, ...
 02009   280   NtContinue  (1244336, 0, ...
 02010   280   NtContinue  (1244336, 0, ...
 02011   280   NtContinue  (1244336, 0, ...
 02012   280   NtContinue  (1244336, 0, ...
 02013   280   NtContinue  (1244336, 0, ...
 02014   280   NtContinue  (1244336, 0, ...
 02015   280   NtContinue  (1244336, 0, ...
 02016   280   NtContinue  (1244336, 0, ...
 02017   280   NtContinue  (1244336, 0, ...
 02018   280   NtContinue  (1244336, 0, ...
 02019   280   NtContinue  (1244336, 0, ...
 02020   280   NtContinue  (1244336, 0, ...
 02021   280   NtContinue  (1244336, 0, ...
 02022   280   NtContinue  (1244336, 0, ...
 02023   280   NtContinue  (1244336, 0, ...
 02024   280   NtContinue  (1244336, 0, ...
 02025   280   NtContinue  (1244336, 0, ...
 02026   280   NtContinue  (1244336, 0, ...
 02027   280   NtContinue  (1244336, 0, ...
 02028   280   NtContinue  (1244336, 0, ...
 02029   280   NtContinue  (1244336, 0, ...
 02030   280   NtContinue  (1244336, 0, ...
 02031   280   NtContinue  (1244336, 0, ...
 02032   280   NtContinue  (1244336, 0, ...
 02033   280   NtContinue  (1244336, 0, ...
 02034   280   NtContinue  (1244336, 0, ...
 02035   280   NtContinue  (1244336, 0, ...
 02036   280   NtContinue  (1244336, 0, ...
 02037   280   NtContinue  (1244336, 0, ...
 02038   280   NtContinue  (1244336, 0, ...
 02039   280   NtContinue  (1244336, 0, ...
 02040   280   NtContinue  (1244336, 0, ...
 02041   280   NtContinue  (1244336, 0, ...
 02042   280   NtContinue  (1244336, 0, ...
 02043   280   NtContinue  (1244336, 0, ...
 02044   280   NtContinue  (1244336, 0, ...
 02045   280   NtContinue  (1244336, 0, ...
 02046   280   NtContinue  (1244336, 0, ...
 02047   280   NtContinue  (1244336, 0, ...
 02048   280   NtContinue  (1244336, 0, ...
 02049   280   NtContinue  (1244336, 0, ...
 02050   280   NtContinue  (1244336, 0, ...
 02051   280   NtContinue  (1244336, 0, ...
 02052   280   NtContinue  (1244336, 0, ...
 02053   280   NtContinue  (1244336, 0, ...
 02054   280   NtContinue  (1244336, 0, ...
 02055   280   NtContinue  (1244336, 0, ...
 02056   280   NtContinue  (1244336, 0, ...
 02057   280   NtContinue  (1244336, 0, ...
 02058   280   NtContinue  (1244336, 0, ...
 02059   280   NtContinue  (1244336, 0, ...
 02060   280   NtContinue  (1244336, 0, ...
 02061   280   NtContinue  (1244336, 0, ...
 02062   280   NtContinue  (1244336, 0, ...
 02063   280   NtContinue  (1244336, 0, ...
 02064   280   NtContinue  (1244336, 0, ...
 02065   280   NtContinue  (1244336, 0, ...
 02066   280   NtContinue  (1244336, 0, ...
 02067   280   NtContinue  (1244336, 0, ...
 02068   280   NtContinue  (1244336, 0, ...
 02069   280   NtContinue  (1244336, 0, ...
 02070   280   NtContinue  (1244336, 0, ...
 02071   280   NtContinue  (1244336, 0, ...
 02072   280   NtContinue  (1244336, 0, ...
 02073   280   NtContinue  (1244336, 0, ...
 02074   280   NtContinue  (1244336, 0, ...
 02075   280   NtContinue  (1244336, 0, ...
 02076   280   NtContinue  (1244336, 0, ...
 02077   280   NtContinue  (1244336, 0, ...
 02078   280   NtContinue  (1244336, 0, ...
 02079   280   NtContinue  (1244336, 0, ...
 02080   280   NtContinue  (1244336, 0, ...
 02081   280   NtContinue  (1244336, 0, ...
 02082   280   NtContinue  (1244336, 0, ...
 02083   280   NtContinue  (1244336, 0, ...
 02084   280   NtContinue  (1244336, 0, ...
 02085   280   NtContinue  (1244336, 0, ...
 02086   280   NtContinue  (1244336, 0, ...
 02087   280   NtContinue  (1244336, 0, ...
 02088   280   NtContinue  (1244336, 0, ...
 02089   280   NtContinue  (1244336, 0, ...
 02090   280   NtContinue  (1244336, 0, ...
 02091   280   NtContinue  (1244336, 0, ...
 02092   280   NtContinue  (1244336, 0, ...
 02093   280   NtContinue  (1244336, 0, ...
 02094   280   NtContinue  (1244336, 0, ...
 02095   280   NtContinue  (1244336, 0, ...
 02096   280   NtContinue  (1244336, 0, ...
 02097   280   NtContinue  (1244336, 0, ...
 02098   280   NtContinue  (1244336, 0, ...
 02099   280   NtContinue  (1244336, 0, ...
 02100   280   NtContinue  (1244336, 0, ...
 02101   280   NtContinue  (1244336, 0, ...
 02102   280   NtContinue  (1244336, 0, ...
 02103   280   NtContinue  (1244336, 0, ...
 02104   280   NtContinue  (1244336, 0, ...
 02105   280   NtContinue  (1244336, 0, ...
 02106   280   NtContinue  (1244336, 0, ...
 02107   280   NtContinue  (1244336, 0, ...
 02108   280   NtContinue  (1244336, 0, ...
 02109   280   NtContinue  (1244336, 0, ...
 02110   280   NtContinue  (1244336, 0, ...
 02111   280   NtContinue  (1244336, 0, ...
 02112   280   NtContinue  (1244336, 0, ...
 02113   280   NtContinue  (1244336, 0, ...
 02114   280   NtContinue  (1244336, 0, ...
 02115   280   NtContinue  (1244336, 0, ...
 02116   280   NtContinue  (1244336, 0, ...
 02117   280   NtContinue  (1244336, 0, ...
 02118   280   NtContinue  (1244336, 0, ...
 02119   280   NtContinue  (1244336, 0, ...
 02120   280   NtContinue  (1244336, 0, ...
 02121   280   NtContinue  (1244336, 0, ...
 02122   280   NtContinue  (1244336, 0, ...
 02123   280   NtContinue  (1244336, 0, ...
 02124   280   NtContinue  (1244336, 0, ...
 02125   280   NtContinue  (1244336, 0, ...
 02126   280   NtContinue  (1244336, 0, ...
 02127   280   NtContinue  (1244336, 0, ...
 02128   280   NtContinue  (1244336, 0, ...
 02129   280   NtContinue  (1244336, 0, ...
 02130   280   NtContinue  (1244336, 0, ...
 02131   280   NtContinue  (1244336, 0, ...
 02132   280   NtContinue  (1244336, 0, ...
 02133   280   NtContinue  (1244336, 0, ...
 02134   280   NtContinue  (1244336, 0, ...
 02135   280   NtContinue  (1244336, 0, ...
 02136   280   NtContinue  (1244336, 0, ...
 02137   280   NtContinue  (1244336, 0, ...
 02138   280   NtContinue  (1244336, 0, ...
 02139   280   NtContinue  (1244336, 0, ...
 02140   280   NtContinue  (1244336, 0, ...
 02141   280   NtContinue  (1244336, 0, ...
 02142   280   NtContinue  (1244336, 0, ...
 02143   280   NtContinue  (1244336, 0, ...
 02144   280   NtContinue  (1244336, 0, ...
 02145   280   NtContinue  (1244336, 0, ...
 02146   280   NtContinue  (1244336, 0, ...
 02147   280   NtContinue  (1244336, 0, ...
 02148   280   NtContinue  (1244336, 0, ...
 02149   280   NtContinue  (1244336, 0, ...
 02150   280   NtContinue  (1244336, 0, ...
 02151   280   NtContinue  (1244336, 0, ...
 02152   280   NtContinue  (1244336, 0, ...
 02153   280   NtContinue  (1244336, 0, ...
 02154   280   NtContinue  (1244336, 0, ...
 02155   280   NtContinue  (1244336, 0, ...
 02156   280   NtContinue  (1244336, 0, ...
 02157   280   NtContinue  (1244336, 0, ...
 02158   280   NtContinue  (1244336, 0, ...
 02159   280   NtContinue  (1244336, 0, ...
 02160   280   NtContinue  (1244336, 0, ...
 02161   280   NtContinue  (1244336, 0, ...
 02162   280   NtContinue  (1244336, 0, ...
 02163   280   NtContinue  (1244336, 0, ...
 02164   280   NtContinue  (1244336, 0, ...
 02165   280   NtContinue  (1244336, 0, ...
 02166   280   NtContinue  (1244336, 0, ...
 02167   280   NtContinue  (1244336, 0, ...
 02168   280   NtContinue  (1244336, 0, ...
 02169   280   NtContinue  (1244336, 0, ...
 02170   280   NtContinue  (1244336, 0, ...
 02171   280   NtContinue  (1244336, 0, ...
 02172   280   NtContinue  (1244336, 0, ...
 02173   280   NtContinue  (1244336, 0, ...
 02174   280   NtContinue  (1244336, 0, ...
 02175   280   NtContinue  (1244336, 0, ...
 02176   280   NtContinue  (1244336, 0, ...
 02177   280   NtContinue  (1244336, 0, ...
 02178   280   NtContinue  (1244336, 0, ...
 02179   280   NtContinue  (1244336, 0, ...
 02180   280   NtContinue  (1244336, 0, ...
 02181   280   NtContinue  (1244336, 0, ...
 02182   280   NtContinue  (1244336, 0, ...
 02183   280   NtContinue  (1244336, 0, ...
 02184   280   NtContinue  (1244336, 0, ...
 02185   280   NtContinue  (1244336, 0, ...
 02186   280   NtContinue  (1244336, 0, ...
 02187   280   NtContinue  (1244336, 0, ...
 02188   280   NtContinue  (1244336, 0, ...
 02189   280   NtContinue  (1244336, 0, ...
 02190   280   NtContinue  (1244336, 0, ...
 02191   280   NtContinue  (1244336, 0, ...
 02192   280   NtContinue  (1244336, 0, ...
 02193   280   NtContinue  (1244336, 0, ...
 02194   280   NtContinue  (1244336, 0, ...
 02195   280   NtContinue  (1244336, 0, ...
 02196   280   NtContinue  (1244336, 0, ...
 02197   280   NtContinue  (1244336, 0, ...
 02198   280   NtContinue  (1244336, 0, ...
 02199   280   NtContinue  (1244336, 0, ...
 02200   280   NtContinue  (1244336, 0, ...
 02201   280   NtContinue  (1244336, 0, ...
 02202   280   NtContinue  (1244336, 0, ...
 02203   280   NtContinue  (1244336, 0, ...
 02204   280   NtContinue  (1244336, 0, ...
 02205   280   NtContinue  (1244336, 0, ...
 02206   280   NtContinue  (1244336, 0, ...
 02207   280   NtContinue  (1244336, 0, ...
 02208   280   NtContinue  (1244336, 0, ...
 02209   280   NtContinue  (1244336, 0, ...
 02210   280   NtContinue  (1244336, 0, ...
 02211   280   NtContinue  (1244336, 0, ...
 02212   280   NtContinue  (1244336, 0, ...
 02213   280   NtContinue  (1244336, 0, ...
 02214   280   NtContinue  (1244336, 0, ...
 02215   280   NtContinue  (1244336, 0, ...
 02216   280   NtContinue  (1244336, 0, ...
 02217   280   NtContinue  (1244336, 0, ...
 02218   280   NtContinue  (1244336, 0, ...
 02219   280   NtContinue  (1244336, 0, ...
 02220   280   NtContinue  (1244336, 0, ...
 02221   280   NtContinue  (1244336, 0, ...
 02222   280   NtContinue  (1244336, 0, ...
 02223   280   NtContinue  (1244336, 0, ...
 02224   280   NtContinue  (1244336, 0, ...
 02225   280   NtContinue  (1244336, 0, ...
 02226   280   NtContinue  (1244336, 0, ...
 02227   280   NtContinue  (1244336, 0, ...
 02228   280   NtContinue  (1244336, 0, ...
 02229   280   NtContinue  (1244336, 0, ...
 02230   280   NtContinue  (1244336, 0, ...
 02231   280   NtContinue  (1244336, 0, ...
 02232   280   NtContinue  (1244336, 0, ...
 02233   280   NtContinue  (1244336, 0, ...
 02234   280   NtContinue  (1244336, 0, ...
 02235   280   NtContinue  (1244336, 0, ...
 02236   280   NtContinue  (1244336, 0, ...
 02237   280   NtContinue  (1244336, 0, ...
 02238   280   NtContinue  (1244336, 0, ...
 02239   280   NtContinue  (1244336, 0, ...
 02240   280   NtContinue  (1244336, 0, ...
 02241   280   NtContinue  (1244336, 0, ...
 02242   280   NtContinue  (1244336, 0, ...
 02243   280   NtContinue  (1244336, 0, ...
 02244   280   NtContinue  (1244336, 0, ...
 02245   280   NtContinue  (1244336, 0, ...
 02246   280   NtContinue  (1244336, 0, ...
 02247   280   NtContinue  (1244336, 0, ...
 02248   280   NtContinue  (1244336, 0, ...
 02249   280   NtContinue  (1244336, 0, ...
 02250   280   NtContinue  (1244336, 0, ...
 02251   280   NtContinue  (1244336, 0, ...
 02252   280   NtContinue  (1244336, 0, ...
 02253   280   NtContinue  (1244336, 0, ...
 02254   280   NtContinue  (1244336, 0, ...
 02255   280   NtContinue  (1244336, 0, ...
 02256   280   NtContinue  (1244336, 0, ...
 02257   280   NtContinue  (1244336, 0, ...
 02258   280   NtContinue  (1244336, 0, ...
 02259   280   NtContinue  (1244336, 0, ...
 02260   280   NtContinue  (1244336, 0, ...
 02261   280   NtContinue  (1244336, 0, ...
 02262   280   NtContinue  (1244336, 0, ...
 02263   280   NtContinue  (1244336, 0, ...
 02264   280   NtContinue  (1244336, 0, ...
 02265   280   NtContinue  (1244336, 0, ...
 02266   280   NtContinue  (1244336, 0, ...
 02267   280   NtContinue  (1244336, 0, ...
 02268   280   NtContinue  (1244336, 0, ...
 02269   280   NtContinue  (1244336, 0, ...
 02270   280   NtContinue  (1244336, 0, ...
 02271   280   NtContinue  (1244336, 0, ...
 02272   280   NtContinue  (1244336, 0, ...
 02273   280   NtContinue  (1244336, 0, ...
 02274   280   NtContinue  (1244336, 0, ...
 02275   280   NtContinue  (1244336, 0, ...
 02276   280   NtContinue  (1244336, 0, ...
 02277   280   NtContinue  (1244336, 0, ...
 02278   280   NtContinue  (1244336, 0, ...
 02279   280   NtContinue  (1244336, 0, ...
 02280   280   NtContinue  (1244336, 0, ...
 02281   280   NtContinue  (1244336, 0, ...
 02282   280   NtContinue  (1244336, 0, ...
 02283   280   NtContinue  (1244336, 0, ...
 02284   280   NtContinue  (1244336, 0, ...
 02285   280   NtContinue  (1244336, 0, ...
 02286   280   NtContinue  (1244336, 0, ...
 02287   280   NtContinue  (1244336, 0, ...
 02288   280   NtContinue  (1244336, 0, ...
 02289   280   NtContinue  (1244336, 0, ...
 02290   280   NtContinue  (1244336, 0, ...
 02291   280   NtContinue  (1244336, 0, ...
 02292   280   NtContinue  (1244336, 0, ...
 02293   280   NtContinue  (1244336, 0, ...
 02294   280   NtContinue  (1244336, 0, ...
 02295   280   NtContinue  (1244336, 0, ...
 02296   280   NtContinue  (1244336, 0, ...
 02297   280   NtContinue  (1244336, 0, ...
 02298   280   NtContinue  (1244336, 0, ...
 02299   280   NtContinue  (1244336, 0, ...
 02300   280   NtContinue  (1244336, 0, ...
 02301   280   NtContinue  (1244336, 0, ...
 02302   280   NtContinue  (1244336, 0, ...
 02303   280   NtContinue  (1244336, 0, ...
 02304   280   NtContinue  (1244336, 0, ...
 02305   280   NtContinue  (1244336, 0, ...
 02306   280   NtContinue  (1244336, 0, ...
 02307   280   NtContinue  (1244336, 0, ...
 02308   280   NtContinue  (1244336, 0, ...
 02309   280   NtContinue  (1244336, 0, ...
 02310   280   NtContinue  (1244336, 0, ...
 02311   280   NtContinue  (1244336, 0, ...
 02312   280   NtContinue  (1244336, 0, ...
 02313   280   NtContinue  (1244336, 0, ...
 02314   280   NtContinue  (1244336, 0, ...
 02315   280   NtContinue  (1244336, 0, ...
 02316   280   NtContinue  (1244336, 0, ...
 02317   280   NtContinue  (1244336, 0, ...
 02318   280   NtContinue  (1244336, 0, ...
 02319   280   NtContinue  (1244336, 0, ...
 02320   280   NtContinue  (1244336, 0, ...
 02321   280   NtContinue  (1244336, 0, ...
 02322   280   NtContinue  (1244336, 0, ...
 02323   280   NtContinue  (1244336, 0, ...
 02324   280   NtContinue  (1244336, 0, ...
 02325   280   NtContinue  (1244336, 0, ...
 02326   280   NtContinue  (1244336, 0, ...
 02327   280   NtContinue  (1244336, 0, ...
 02328   280   NtContinue  (1244336, 0, ...
 02329   280   NtContinue  (1244336, 0, ...
 02330   280   NtContinue  (1244336, 0, ...
 02331   280   NtContinue  (1244336, 0, ...
 02332   280   NtContinue  (1244336, 0, ...
 02333   280   NtContinue  (1244336, 0, ...
 02334   280   NtContinue  (1244336, 0, ...
 02335   280   NtContinue  (1244336, 0, ...
 02336   280   NtContinue  (1244336, 0, ...
 02337   280   NtContinue  (1244336, 0, ...
 02338   280   NtContinue  (1244336, 0, ...
 02339   280   NtContinue  (1244336, 0, ...
 02340   280   NtContinue  (1244336, 0, ...
 02341   280   NtContinue  (1244336, 0, ...
 02342   280   NtContinue  (1244336, 0, ...
 02343   280   NtContinue  (1244336, 0, ...
 02344   280   NtContinue  (1244336, 0, ...
 02345   280   NtContinue  (1244336, 0, ...
 02346   280   NtContinue  (1244336, 0, ...
 02347   280   NtContinue  (1244336, 0, ...
 02348   280   NtContinue  (1244336, 0, ...
 02349   280   NtContinue  (1244336, 0, ...
 02350   280   NtContinue  (1244336, 0, ...
 02351   280   NtContinue  (1244336, 0, ...
 02352   280   NtContinue  (1244336, 0, ...
 02353   280   NtContinue  (1244336, 0, ...
 02354   280   NtContinue  (1244336, 0, ...
 02355   280   NtContinue  (1244336, 0, ...
 02356   280   NtContinue  (1244336, 0, ...
 02357   280   NtContinue  (1244336, 0, ...
 02358   280   NtContinue  (1244336, 0, ...
 02359   280   NtContinue  (1244336, 0, ...
 02360   280   NtContinue  (1244336, 0, ...
 02361   280   NtContinue  (1244336, 0, ...
 02362   280   NtContinue  (1244336, 0, ...
 02363   280   NtContinue  (1244336, 0, ...
 02364   280   NtContinue  (1244336, 0, ...
 02365   280   NtContinue  (1244336, 0, ...
 02366   280   NtContinue  (1244336, 0, ...
 02367   280   NtContinue  (1244336, 0, ...
 02368   280   NtContinue  (1244336, 0, ...
 02369   280   NtContinue  (1244336, 0, ...
 02370   280   NtContinue  (1244336, 0, ...
 02371   280   NtContinue  (1244336, 0, ...
 02372   280   NtContinue  (1244336, 0, ...
 02373   280   NtContinue  (1244336, 0, ...
 02374   280   NtContinue  (1244336, 0, ...
 02375   280   NtContinue  (1244336, 0, ...
 02376   280   NtContinue  (1244336, 0, ...
 02377   280   NtContinue  (1244336, 0, ...
 02378   280   NtContinue  (1244336, 0, ...
 02379   280   NtContinue  (1244336, 0, ...
 02380   280   NtContinue  (1244336, 0, ...
 02381   280   NtContinue  (1244336, 0, ...
 02382   280   NtContinue  (1244336, 0, ...
 02383   280   NtContinue  (1244336, 0, ...
 02384   280   NtContinue  (1244336, 0, ...
 02385   280   NtContinue  (1244336, 0, ...
 02386   280   NtContinue  (1244336, 0, ...
 02387   280   NtContinue  (1244336, 0, ...
 02388   280   NtContinue  (1244336, 0, ...
 02389   280   NtContinue  (1244336, 0, ...
 02390   280   NtContinue  (1244336, 0, ...
 02391   280   NtContinue  (1244336, 0, ...
 02392   280   NtContinue  (1244336, 0, ...
 02393   280   NtContinue  (1244336, 0, ...
 02394   280   NtContinue  (1244336, 0, ...
 02395   280   NtContinue  (1244336, 0, ...
 02396   280   NtContinue  (1244336, 0, ...
 02397   280   NtContinue  (1244336, 0, ...
 02398   280   NtContinue  (1244336, 0, ...
 02399   280   NtContinue  (1244336, 0, ...
 02400   280   NtContinue  (1244336, 0, ...
 02401   280   NtContinue  (1244336, 0, ...
 02402   280   NtContinue  (1244336, 0, ...
 02403   280   NtContinue  (1244336, 0, ...
 02404   280   NtContinue  (1244336, 0, ...
 02405   280   NtContinue  (1244336, 0, ...
 02406   280   NtContinue  (1244336, 0, ...
 02407   280   NtContinue  (1244336, 0, ...
 02408   280   NtContinue  (1244336, 0, ...
 02409   280   NtContinue  (1244336, 0, ...
 02410   280   NtContinue  (1244336, 0, ...
 02411   280   NtContinue  (1244336, 0, ...
 02412   280   NtContinue  (1244336, 0, ...
 02413   280   NtContinue  (1244336, 0, ...
 02414   280   NtContinue  (1244336, 0, ...
 02415   280   NtContinue  (1244336, 0, ...
 02416   280   NtContinue  (1244336, 0, ...
 02417   280   NtContinue  (1244336, 0, ...
 02418   280   NtContinue  (1244336, 0, ...
 02419   280   NtContinue  (1244336, 0, ...
 02420   280   NtContinue  (1244336, 0, ...
 02421   280   NtContinue  (1244336, 0, ...
 02422   280   NtContinue  (1244336, 0, ...
 02423   280   NtContinue  (1244336, 0, ...
 02424   280   NtContinue  (1244336, 0, ...
 02425   280   NtContinue  (1244336, 0, ...
 02426   280   NtContinue  (1244336, 0, ...
 02427   280   NtContinue  (1244336, 0, ...
 02428   280   NtContinue  (1244336, 0, ...
 02429   280   NtContinue  (1244336, 0, ...
 02430   280   NtContinue  (1244336, 0, ...
 02431   280   NtContinue  (1244336, 0, ...
 02432   280   NtContinue  (1244336, 0, ...
 02433   280   NtContinue  (1244336, 0, ...
 02434   280   NtContinue  (1244336, 0, ...
 02435   280   NtContinue  (1244336, 0, ...
 02436   280   NtContinue  (1244336, 0, ...
 02437   280   NtContinue  (1244336, 0, ...
 02438   280   NtContinue  (1244336, 0, ...
 02439   280   NtContinue  (1244336, 0, ...
 02440   280   NtContinue  (1244336, 0, ...
 02441   280   NtContinue  (1244336, 0, ...
 02442   280   NtContinue  (1244336, 0, ...
 02443   280   NtContinue  (1244336, 0, ...
 02444   280   NtContinue  (1244336, 0, ...
 02445   280   NtContinue  (1244336, 0, ...
 02446   280   NtContinue  (1244336, 0, ...
 02447   280   NtContinue  (1244336, 0, ...
 02448   280   NtContinue  (1244336, 0, ...
 02449   280   NtContinue  (1244336, 0, ...
 02450   280   NtContinue  (1244336, 0, ...
 02451   280   NtContinue  (1244336, 0, ...
 02452   280   NtContinue  (1244336, 0, ...
 02453   280   NtContinue  (1244336, 0, ...
 02454   280   NtContinue  (1244336, 0, ...
 02455   280   NtContinue  (1244336, 0, ...
 02456   280   NtContinue  (1244336, 0, ...
 02457   280   NtContinue  (1244336, 0, ...
 02458   280   NtContinue  (1244336, 0, ...
 02459   280   NtContinue  (1244336, 0, ...
 02460   280   NtContinue  (1244336, 0, ...
 02461   280   NtContinue  (1244336, 0, ...
 02462   280   NtContinue  (1244336, 0, ...
 02463   280   NtContinue  (1244336, 0, ...
 02464   280   NtContinue  (1244336, 0, ...
 02465   280   NtContinue  (1244336, 0, ...
 02466   280   NtContinue  (1244336, 0, ...
 02467   280   NtContinue  (1244336, 0, ...
 02468   280   NtContinue  (1244336, 0, ...
 02469   280   NtContinue  (1244336, 0, ...
 02470   280   NtContinue  (1244336, 0, ...
 02471   280   NtContinue  (1244336, 0, ...
 02472   280   NtContinue  (1244336, 0, ...
 02473   280   NtContinue  (1244336, 0, ...
 02474   280   NtContinue  (1244336, 0, ...
 02475   280   NtContinue  (1244336, 0, ...
 02476   280   NtContinue  (1244336, 0, ...
 02477   280   NtContinue  (1244336, 0, ...
 02478   280   NtContinue  (1244336, 0, ...
 02479   280   NtContinue  (1244336, 0, ...
 02480   280   NtContinue  (1244336, 0, ...
 02481   280   NtContinue  (1244336, 0, ...
 02482   280   NtContinue  (1244336, 0, ...
 02483   280   NtContinue  (1244336, 0, ...
 02484   280   NtContinue  (1244336, 0, ...
 02485   280   NtContinue  (1244336, 0, ...
 02486   280   NtContinue  (1244336, 0, ...
 02487   280   NtContinue  (1244336, 0, ...
 02488   280   NtContinue  (1244336, 0, ...
 02489   280   NtContinue  (1244336, 0, ...
 02490   280   NtContinue  (1244336, 0, ...
 02491   280   NtContinue  (1244336, 0, ...
 02492   280   NtContinue  (1244336, 0, ...
 02493   280   NtContinue  (1244336, 0, ...
 02494   280   NtContinue  (1244336, 0, ...
 02495   280   NtContinue  (1244336, 0, ...
 02496   280   NtContinue  (1244336, 0, ...
 02497   280   NtContinue  (1244336, 0, ...
 02498   280   NtContinue  (1244336, 0, ...
 02499   280   NtContinue  (1244336, 0, ...
 02500   280   NtContinue  (1244336, 0, ...
 02501   280   NtContinue  (1244336, 0, ...
 02502   280   NtContinue  (1244336, 0, ...
 02503   280   NtContinue  (1244336, 0, ...
 02504   280   NtContinue  (1244336, 0, ...
 02505   280   NtContinue  (1244336, 0, ...
 02506   280   NtContinue  (1244336, 0, ...
 02507   280   NtContinue  (1244336, 0, ...
 02508   280   NtContinue  (1244336, 0, ...
 02509   280   NtContinue  (1244336, 0, ...
 02510   280   NtContinue  (1244336, 0, ...
 02511   280   NtContinue  (1244336, 0, ...
 02512   280   NtContinue  (1244336, 0, ...
 02513   280   NtContinue  (1244336, 0, ...
 02514   280   NtContinue  (1244336, 0, ...
 02515   280   NtContinue  (1244336, 0, ...
 02516   280   NtContinue  (1244336, 0, ...
 02517   280   NtContinue  (1244336, 0, ...
 02518   280   NtContinue  (1244336, 0, ...
 02519   280   NtContinue  (1244336, 0, ...
 02520   280   NtContinue  (1244336, 0, ...
 02521   280   NtContinue  (1244336, 0, ...
 02522   280   NtContinue  (1244336, 0, ...
 02523   280   NtContinue  (1244336, 0, ...
 02524   280   NtContinue  (1244336, 0, ...
 02525   280   NtContinue  (1244336, 0, ...
 02526   280   NtContinue  (1244336, 0, ...
 02527   280   NtContinue  (1244336, 0, ...
 02528   280   NtContinue  (1244336, 0, ...
 02529   280   NtContinue  (1244336, 0, ...
 02530   280   NtContinue  (1244336, 0, ...
 02531   280   NtContinue  (1244336, 0, ...
 02532   280   NtContinue  (1244336, 0, ...
 02533   280   NtContinue  (1244336, 0, ...
 02534   280   NtContinue  (1244336, 0, ...
 02535   280   NtContinue  (1244336, 0, ...
 02536   280   NtContinue  (1244336, 0, ...
 02537   280   NtContinue  (1244336, 0, ...
 02538   280   NtContinue  (1244336, 0, ...
 02539   280   NtContinue  (1244336, 0, ...
 02540   280   NtContinue  (1244336, 0, ...
 02541   280   NtContinue  (1244336, 0, ...
 02542   280   NtContinue  (1244336, 0, ...
 02543   280   NtContinue  (1244336, 0, ...
 02544   280   NtContinue  (1244336, 0, ...
 02545   280   NtContinue  (1244336, 0, ...
 02546   280   NtContinue  (1244336, 0, ...
 02547   280   NtContinue  (1244336, 0, ...
 02548   280   NtContinue  (1244336, 0, ...
 02549   280   NtContinue  (1244336, 0, ...
 02550   280   NtContinue  (1244336, 0, ...
 02551   280   NtContinue  (1244336, 0, ...
 02552   280   NtContinue  (1244336, 0, ...
 02553   280   NtContinue  (1244336, 0, ...
 02554   280   NtContinue  (1244336, 0, ...
 02555   280   NtContinue  (1244336, 0, ...
 02556   280   NtContinue  (1244336, 0, ...
 02557   280   NtContinue  (1244336, 0, ...
 02558   280   NtContinue  (1244336, 0, ...
 02559   280   NtContinue  (1244336, 0, ...
 02560   280   NtContinue  (1244336, 0, ...
 02561   280   NtContinue  (1244336, 0, ...
 02562   280   NtContinue  (1244336, 0, ...
 02563   280   NtContinue  (1244336, 0, ...
 02564   280   NtContinue  (1244336, 0, ...
 02565   280   NtContinue  (1244336, 0, ...
 02566   280   NtContinue  (1244336, 0, ...
 02567   280   NtContinue  (1244336, 0, ...
 02568   280   NtContinue  (1244336, 0, ...
 02569   280   NtContinue  (1244336, 0, ...
 02570   280   NtContinue  (1244336, 0, ...
 02571   280   NtContinue  (1244336, 0, ...
 02572   280   NtContinue  (1244336, 0, ...
 02573   280   NtContinue  (1244336, 0, ...
 02574   280   NtContinue  (1244336, 0, ...
 02575   280   NtContinue  (1244336, 0, ...
 02576   280   NtContinue  (1244336, 0, ...
 02577   280   NtContinue  (1244336, 0, ...
 02578   280   NtContinue  (1244336, 0, ...
 02579   280   NtContinue  (1244336, 0, ...
 02580   280   NtContinue  (1244336, 0, ...
 02581   280   NtContinue  (1244336, 0, ...
 02582   280   NtContinue  (1244336, 0, ...
 02583   280   NtContinue  (1244336, 0, ...
 02584   280   NtContinue  (1244336, 0, ...
 02585   280   NtContinue  (1244336, 0, ...
 02586   280   NtContinue  (1244336, 0, ...
 02587   280   NtContinue  (1244336, 0, ...
 02588   280   NtContinue  (1244336, 0, ...
 02589   280   NtContinue  (1244336, 0, ...
 02590   280   NtContinue  (1244336, 0, ...
 02591   280   NtContinue  (1244336, 0, ...
 02592   280   NtContinue  (1244336, 0, ...
 02593   280   NtContinue  (1244336, 0, ...
 02594   280   NtContinue  (1244336, 0, ...
 02595   280   NtContinue  (1244336, 0, ...
 02596   280   NtContinue  (1244336, 0, ...
 02597   280   NtContinue  (1244336, 0, ...
 02598   280   NtContinue  (1244336, 0, ...
 02599   280   NtContinue  (1244336, 0, ...
 02600   280   NtContinue  (1244336, 0, ...
 02601   280   NtContinue  (1244336, 0, ...
 02602   280   NtContinue  (1244336, 0, ...
 02603   280   NtContinue  (1244336, 0, ...
 02604   280   NtContinue  (1244336, 0, ...
 02605   280   NtContinue  (1244336, 0, ...
 02606   280   NtContinue  (1244336, 0, ...
 02607   280   NtContinue  (1244336, 0, ...
 02608   280   NtContinue  (1244336, 0, ...
 02609   280   NtContinue  (1244336, 0, ...
 02610   280   NtContinue  (1244336, 0, ...
 02611   280   NtContinue  (1244336, 0, ...
 02612   280   NtContinue  (1244336, 0, ...
 02613   280   NtContinue  (1244336, 0, ...
 02614   280   NtContinue  (1244336, 0, ...
 02615   280   NtContinue  (1244336, 0, ...
 02616   280   NtContinue  (1244336, 0, ...
 02617   280   NtContinue  (1244336, 0, ...
 02618   280   NtContinue  (1244336, 0, ...
 02619   280   NtContinue  (1244336, 0, ...
 02620   280   NtContinue  (1244336, 0, ...
 02621   280   NtContinue  (1244336, 0, ...
 02622   280   NtContinue  (1244336, 0, ...
 02623   280   NtContinue  (1244336, 0, ...
 02624   280   NtContinue  (1244336, 0, ...
 02625   280   NtContinue  (1244336, 0, ...
 02626   280   NtContinue  (1244336, 0, ...
 02627   280   NtContinue  (1244336, 0, ...
 02628   280   NtContinue  (1244336, 0, ...
 02629   280   NtContinue  (1244336, 0, ...
 02630   280   NtContinue  (1244336, 0, ...
 02631   280   NtContinue  (1244336, 0, ...
 02632   280   NtContinue  (1244336, 0, ...
 02633   280   NtContinue  (1244336, 0, ...
 02634   280   NtContinue  (1244336, 0, ...
 02635   280   NtContinue  (1244336, 0, ...
 02636   280   NtContinue  (1244336, 0, ...
 02637   280   NtContinue  (1244336, 0, ...
 02638   280   NtContinue  (1244336, 0, ...
 02639   280   NtContinue  (1244336, 0, ...
 02640   280   NtContinue  (1244336, 0, ...
 02641   280   NtContinue  (1244336, 0, ...
 02642   280   NtContinue  (1244336, 0, ...
 02643   280   NtContinue  (1244336, 0, ...
 02644   280   NtContinue  (1244336, 0, ...
 02645   280   NtContinue  (1244336, 0, ...
 02646   280   NtContinue  (1244336, 0, ...
 02647   280   NtContinue  (1244336, 0, ...
 02648   280   NtContinue  (1244336, 0, ...
 02649   280   NtContinue  (1244336, 0, ...
 02650   280   NtContinue  (1244336, 0, ...
 02651   280   NtContinue  (1244336, 0, ...
 02652   280   NtContinue  (1244336, 0, ...
 02653   280   NtContinue  (1244336, 0, ...
 02654   280   NtContinue  (1244336, 0, ...
 02655   280   NtContinue  (1244336, 0, ...
 02656   280   NtContinue  (1244336, 0, ...
 02657   280   NtContinue  (1244336, 0, ...
 02658   280   NtContinue  (1244336, 0, ...
 02659   280   NtContinue  (1244336, 0, ...
 02660   280   NtContinue  (1244336, 0, ...
 02661   280   NtContinue  (1244336, 0, ...
 02662   280   NtContinue  (1244336, 0, ...
 02663   280   NtContinue  (1244336, 0, ...
 02664   280   NtContinue  (1244336, 0, ...
 02665   280   NtContinue  (1244336, 0, ...
 02666   280   NtContinue  (1244336, 0, ...
 02667   280   NtContinue  (1244336, 0, ...
 02668   280   NtContinue  (1244336, 0, ...
 02669   280   NtContinue  (1244336, 0, ...
 02670   280   NtContinue  (1244336, 0, ...
 02671   280   NtContinue  (1244336, 0, ...
 02672   280   NtContinue  (1244336, 0, ...
 02673   280   NtContinue  (1244336, 0, ...
 02674   280   NtContinue  (1244336, 0, ...
 02675   280   NtContinue  (1244336, 0, ...
 02676   280   NtContinue  (1244336, 0, ...
 02677   280   NtContinue  (1244336, 0, ...
 02678   280   NtContinue  (1244336, 0, ...
 02679   280   NtContinue  (1244336, 0, ...
 02680   280   NtContinue  (1244336, 0, ...
 02681   280   NtContinue  (1244336, 0, ...
 02682   280   NtContinue  (1244336, 0, ...
 02683   280   NtContinue  (1244336, 0, ...
 02684   280   NtContinue  (1244336, 0, ...
 02685   280   NtContinue  (1244336, 0, ...
 02686   280   NtContinue  (1244336, 0, ...
 02687   280   NtContinue  (1244336, 0, ...
 02688   280   NtContinue  (1244336, 0, ...
 02689   280   NtContinue  (1244336, 0, ...
 02690   280   NtContinue  (1244336, 0, ...
 02691   280   NtContinue  (1244336, 0, ...
 02692   280   NtContinue  (1244336, 0, ...
 02693   280   NtContinue  (1244336, 0, ...
 02694   280   NtContinue  (1244336, 0, ...
 02695   280   NtContinue  (1244336, 0, ...
 02696   280   NtContinue  (1244336, 0, ...
 02697   280   NtContinue  (1244336, 0, ...
 02698   280   NtContinue  (1244336, 0, ...
 02699   280   NtContinue  (1244336, 0, ...
 02700   280   NtContinue  (1244336, 0, ...
 02701   280   NtContinue  (1244336, 0, ...
 02702   280   NtContinue  (1244336, 0, ...
 02703   280   NtContinue  (1244336, 0, ...
 02704   280   NtContinue  (1244336, 0, ...
 02705   280   NtContinue  (1244336, 0, ...
 02706   280   NtContinue  (1244336, 0, ...
 02707   280   NtContinue  (1244336, 0, ...
 02708   280   NtContinue  (1244336, 0, ...
 02709   280   NtContinue  (1244336, 0, ...
 02710   280   NtContinue  (1244336, 0, ...
 02711   280   NtContinue  (1244336, 0, ...
 02712   280   NtContinue  (1244336, 0, ...
 02713   280   NtContinue  (1244336, 0, ...
 02714   280   NtContinue  (1244336, 0, ...
 02715   280   NtContinue  (1244336, 0, ...
 02716   280   NtContinue  (1244336, 0, ...
 02717   280   NtContinue  (1244336, 0, ...
 02718   280   NtContinue  (1244336, 0, ...
 02719   280   NtContinue  (1244336, 0, ...
 02720   280   NtContinue  (1244336, 0, ...
 02721   280   NtContinue  (1244336, 0, ...
 02722   280   NtContinue  (1244336, 0, ...
 02723   280   NtContinue  (1244336, 0, ...
 02724   280   NtContinue  (1244336, 0, ...
 02725   280   NtContinue  (1244336, 0, ...
 02726   280   NtContinue  (1244336, 0, ...
 02727   280   NtContinue  (1244336, 0, ...
 02728   280   NtContinue  (1244336, 0, ...
 02729   280   NtContinue  (1244336, 0, ...
 02730   280   NtContinue  (1244336, 0, ...
 02731   280   NtContinue  (1244336, 0, ...
 02732   280   NtContinue  (1244336, 0, ...
 02733   280   NtContinue  (1244336, 0, ...
 02734   280   NtContinue  (1244336, 0, ...
 02735   280   NtContinue  (1244336, 0, ...
 02736   280   NtContinue  (1244336, 0, ...
 02737   280   NtContinue  (1244336, 0, ...
 02738   280   NtContinue  (1244336, 0, ...
 02739   280   NtContinue  (1244336, 0, ...
 02740   280   NtContinue  (1244336, 0, ...
 02741   280   NtContinue  (1244336, 0, ...
 02742   280   NtContinue  (1244336, 0, ...
 02743   280   NtContinue  (1244336, 0, ...
 02744   280   NtContinue  (1244336, 0, ...
 02745   280   NtContinue  (1244336, 0, ...
 02746   280   NtContinue  (1244336, 0, ...
 02747   280   NtContinue  (1244336, 0, ...
 02748   280   NtContinue  (1244336, 0, ...
 02749   280   NtContinue  (1244336, 0, ...
 02750   280   NtContinue  (1244336, 0, ...
 02751   280   NtContinue  (1244336, 0, ...
 02752   280   NtContinue  (1244336, 0, ...
 02753   280   NtContinue  (1244336, 0, ...
 02754   280   NtContinue  (1244336, 0, ...
 02755   280   NtContinue  (1244336, 0, ...
 02756   280   NtContinue  (1244336, 0, ...
 02757   280   NtContinue  (1244336, 0, ...
 02758   280   NtContinue  (1244336, 0, ...
 02759   280   NtContinue  (1244336, 0, ...
 02760   280   NtContinue  (1244336, 0, ...
 02761   280   NtContinue  (1244336, 0, ...
 02762   280   NtContinue  (1244336, 0, ...
 02763   280   NtContinue  (1244336, 0, ...
 02764   280   NtContinue  (1244336, 0, ...
 02765   280   NtContinue  (1244336, 0, ...
 02766   280   NtContinue  (1244336, 0, ...
 02767   280   NtContinue  (1244336, 0, ...
 02768   280   NtContinue  (1244336, 0, ...
 02769   280   NtContinue  (1244336, 0, ...
 02770   280   NtContinue  (1244336, 0, ...
 02771   280   NtContinue  (1244336, 0, ...
 02772   280   NtContinue  (1244336, 0, ...
 02773   280   NtContinue  (1244336, 0, ...
 02774   280   NtContinue  (1244336, 0, ...
 02775   280   NtContinue  (1244336, 0, ...
 02776   280   NtContinue  (1244336, 0, ...
 02777   280   NtContinue  (1244336, 0, ...
 02778   280   NtContinue  (1244336, 0, ...
 02779   280   NtContinue  (1244336, 0, ...
 02780   280   NtContinue  (1244336, 0, ...
 02781   280   NtContinue  (1244336, 0, ...
 02782   280   NtContinue  (1244336, 0, ...
 02783   280   NtContinue  (1244336, 0, ...
 02784   280   NtContinue  (1244336, 0, ...
 02785   280   NtContinue  (1244336, 0, ...
 02786   280   NtContinue  (1244336, 0, ...
 02787   280   NtContinue  (1244336, 0, ...
 02788   280   NtContinue  (1244336, 0, ...
 02789   280   NtContinue  (1244336, 0, ...
 02790   280   NtContinue  (1244336, 0, ...
 02791   280   NtContinue  (1244336, 0, ...
 02792   280   NtContinue  (1244336, 0, ...
 02793   280   NtContinue  (1244336, 0, ...
 02794   280   NtContinue  (1244336, 0, ...
 02795   280   NtContinue  (1244336, 0, ...
 02796   280   NtContinue  (1244336, 0, ...
 02797   280   NtContinue  (1244336, 0, ...
 02798   280   NtContinue  (1244336, 0, ...
 02799   280   NtContinue  (1244336, 0, ...
 02800   280   NtContinue  (1244336, 0, ...
 02801   280   NtContinue  (1244336, 0, ...
 02802   280   NtContinue  (1244336, 0, ...
 02803   280   NtContinue  (1244336, 0, ...
 02804   280   NtContinue  (1244336, 0, ...
 02805   280   NtContinue  (1244336, 0, ...
 02806   280   NtContinue  (1244336, 0, ...
 02807   280   NtContinue  (1244336, 0, ...
 02808   280   NtContinue  (1244336, 0, ...
 02809   280   NtContinue  (1244336, 0, ...
 02810   280   NtContinue  (1244336, 0, ...
 02811   280   NtContinue  (1244336, 0, ...
 02812   280   NtContinue  (1244336, 0, ...
 02813   280   NtContinue  (1244336, 0, ...
 02814   280   NtContinue  (1244336, 0, ...
 02815   280   NtContinue  (1244336, 0, ...
 02816   280   NtContinue  (1244336, 0, ...
 02817   280   NtContinue  (1244336, 0, ...
 02818   280   NtContinue  (1244336, 0, ...
 02819   280   NtContinue  (1244336, 0, ...
 02820   280   NtContinue  (1244336, 0, ...
 02821   280   NtContinue  (1244336, 0, ...
 02822   280   NtContinue  (1244336, 0, ...
 02823   280   NtContinue  (1244336, 0, ...
 02824   280   NtContinue  (1244336, 0, ...
 02825   280   NtContinue  (1244336, 0, ...
 02826   280   NtContinue  (1244336, 0, ...
 02827   280   NtContinue  (1244336, 0, ...
 02828   280   NtContinue  (1244336, 0, ...
 02829   280   NtContinue  (1244336, 0, ...
 02830   280   NtContinue  (1244336, 0, ...
 02831   280   NtContinue  (1244336, 0, ...
 02832   280   NtContinue  (1244336, 0, ...
 02833   280   NtContinue  (1244336, 0, ...
 02834   280   NtContinue  (1244336, 0, ...
 02835   280   NtContinue  (1244336, 0, ...
 02836   280   NtContinue  (1244336, 0, ...
 02837   280   NtContinue  (1244336, 0, ...
 02838   280   NtContinue  (1244336, 0, ...
 02839   280   NtContinue  (1244336, 0, ...
 02840   280   NtContinue  (1244336, 0, ...
 02841   280   NtContinue  (1244336, 0, ...
 02842   280   NtContinue  (1244336, 0, ...
 02843   280   NtContinue  (1244336, 0, ...
 02844   280   NtContinue  (1244336, 0, ...
 02845   280   NtContinue  (1244336, 0, ...
 02846   280   NtContinue  (1244336, 0, ...
 02847   280   NtContinue  (1244336, 0, ...
 02848   280   NtContinue  (1244336, 0, ...
 02849   280   NtContinue  (1244336, 0, ...
 02850   280   NtContinue  (1244336, 0, ...
 02851   280   NtContinue  (1244336, 0, ...
 02852   280   NtContinue  (1244336, 0, ...
 02853   280   NtContinue  (1244336, 0, ...
 02854   280   NtContinue  (1244336, 0, ...
 02855   280   NtContinue  (1244336, 0, ...
 02856   280   NtContinue  (1244336, 0, ...
 02857   280   NtContinue  (1244336, 0, ...
 02858   280   NtContinue  (1244336, 0, ...
 02859   280   NtContinue  (1244336, 0, ...
 02860   280   NtContinue  (1244336, 0, ...
 02861   280   NtContinue  (1244336, 0, ...
 02862   280   NtContinue  (1244336, 0, ...
 02863   280   NtContinue  (1244336, 0, ...
 02864   280   NtContinue  (1244336, 0, ...
 02865   280   NtContinue  (1244336, 0, ...
 02866   280   NtContinue  (1244336, 0, ...
 02867   280   NtContinue  (1244336, 0, ...
 02868   280   NtContinue  (1244336, 0, ...
 02869   280   NtContinue  (1244336, 0, ...
 02870   280   NtContinue  (1244336, 0, ...
 02871   280   NtContinue  (1244336, 0, ...
 02872   280   NtContinue  (1244336, 0, ...
 02873   280   NtContinue  (1244336, 0, ...
 02874   280   NtContinue  (1244336, 0, ...
 02875   280   NtContinue  (1244336, 0, ...
 02876   280   NtContinue  (1244336, 0, ...
 02877   280   NtContinue  (1244336, 0, ...
 02878   280   NtContinue  (1244336, 0, ...
 02879   280   NtContinue  (1244336, 0, ...
 02880   280   NtContinue  (1244336, 0, ...
 02881   280   NtContinue  (1244336, 0, ...
 02882   280   NtContinue  (1244336, 0, ...
 02883   280   NtContinue  (1244336, 0, ...
 02884   280   NtContinue  (1244336, 0, ...
 02885   280   NtContinue  (1244336, 0, ...
 02886   280   NtContinue  (1244336, 0, ...
 02887   280   NtContinue  (1244336, 0, ...
 02888   280   NtContinue  (1244336, 0, ...
 02889   280   NtContinue  (1244336, 0, ...
 02890   280   NtContinue  (1244336, 0, ...
 02891   280   NtContinue  (1244336, 0, ...
 02892   280   NtContinue  (1244336, 0, ...
 02893   280   NtContinue  (1244336, 0, ...
 02894   280   NtContinue  (1244336, 0, ...
 02895   280   NtContinue  (1244336, 0, ...
 02896   280   NtContinue  (1244336, 0, ...
 02897   280   NtContinue  (1244336, 0, ...
 02898   280   NtContinue  (1244336, 0, ...
 02899   280   NtContinue  (1244336, 0, ...
 02900   280   NtContinue  (1244336, 0, ...
 02901   280   NtContinue  (1244336, 0, ...
 02902   280   NtContinue  (1244336, 0, ...
 02903   280   NtContinue  (1244336, 0, ...
 02904   280   NtContinue  (1244336, 0, ...
 02905   280   NtContinue  (1244336, 0, ...
 02906   280   NtContinue  (1244336, 0, ...
 02907   280   NtContinue  (1244336, 0, ...
 02908   280   NtContinue  (1244336, 0, ...
 02909   280   NtContinue  (1244336, 0, ...
 02910   280   NtContinue  (1244336, 0, ...
 02911   280   NtContinue  (1244336, 0, ...
 02912   280   NtContinue  (1244336, 0, ...
 02913   280   NtContinue  (1244336, 0, ...
 02914   280   NtContinue  (1244336, 0, ...
 02915   280   NtContinue  (1244336, 0, ...
 02916   280   NtContinue  (1244336, 0, ...
 02917   280   NtContinue  (1244336, 0, ...
 02918   280   NtContinue  (1244336, 0, ...
 02919   280   NtContinue  (1244336, 0, ...
 02920   280   NtContinue  (1244336, 0, ...
 02921   280   NtContinue  (1244336, 0, ...
 02922   280   NtContinue  (1244336, 0, ...
 02923   280   NtContinue  (1244336, 0, ...
 02924   280   NtContinue  (1244336, 0, ...
 02925   280   NtContinue  (1244336, 0, ...
 02926   280   NtContinue  (1244336, 0, ...
 02927   280   NtContinue  (1244336, 0, ...
 02928   280   NtContinue  (1244336, 0, ...
 02929   280   NtContinue  (1244336, 0, ...
 02930   280   NtContinue  (1244336, 0, ...
 02931   280   NtContinue  (1244336, 0, ...
 02932   280   NtContinue  (1244336, 0, ...
 02933   280   NtContinue  (1244336, 0, ...
 02934   280   NtContinue  (1244336, 0, ...
 02935   280   NtContinue  (1244336, 0, ...
 02936   280   NtContinue  (1244336, 0, ...
 02937   280   NtContinue  (1244336, 0, ...
 02938   280   NtContinue  (1244336, 0, ...
 02939   280   NtContinue  (1244336, 0, ...
 02940   280   NtContinue  (1244336, 0, ...
 02941   280   NtContinue  (1244336, 0, ...
 02942   280   NtContinue  (1244336, 0, ...
 02943   280   NtContinue  (1244336, 0, ...
 02944   280   NtContinue  (1244336, 0, ...
 02945   280   NtContinue  (1244336, 0, ...
 02946   280   NtContinue  (1244336, 0, ...
 02947   280   NtContinue  (1244336, 0, ...
 02948   280   NtContinue  (1244336, 0, ...
 02949   280   NtContinue  (1244336, 0, ...
 02950   280   NtContinue  (1244336, 0, ...
 02951   280   NtContinue  (1244336, 0, ...
 02952   280   NtContinue  (1244336, 0, ...
 02953   280   NtContinue  (1244336, 0, ...
 02954   280   NtContinue  (1244336, 0, ...
 02955   280   NtContinue  (1244336, 0, ...
 02956   280   NtContinue  (1244336, 0, ...
 02957   280   NtContinue  (1244336, 0, ...
 02958   280   NtContinue  (1244336, 0, ...
 02959   280   NtContinue  (1244336, 0, ...
 02960   280   NtContinue  (1244336, 0, ...
 02961   280   NtContinue  (1244336, 0, ...
 02962   280   NtContinue  (1244336, 0, ...
 02963   280   NtContinue  (1244336, 0, ...
 02964   280   NtContinue  (1244336, 0, ...
 02965   280   NtContinue  (1244336, 0, ...
 02966   280   NtContinue  (1244336, 0, ...
 02967   280   NtContinue  (1244336, 0, ...
 02968   280   NtContinue  (1244336, 0, ...
 02969   280   NtContinue  (1244336, 0, ...
 02970   280   NtContinue  (1244336, 0, ...
 02971   280   NtContinue  (1244336, 0, ...
 02972   280   NtContinue  (1244336, 0, ...
 02973   280   NtContinue  (1244336, 0, ...
 02974   280   NtContinue  (1244336, 0, ...
 02975   280   NtContinue  (1244336, 0, ...
 02976   280   NtContinue  (1244336, 0, ...
 02977   280   NtContinue  (1244336, 0, ...
 02978   280   NtContinue  (1244336, 0, ...
 02979   280   NtContinue  (1244336, 0, ...
 02980   280   NtContinue  (1244336, 0, ...
 02981   280   NtContinue  (1244336, 0, ...
 02982   280   NtContinue  (1244336, 0, ...
 02983   280   NtContinue  (1244336, 0, ...
 02984   280   NtContinue  (1244336, 0, ...
 02985   280   NtContinue  (1244336, 0, ...
 02986   280   NtContinue  (1244336, 0, ...
 02987   280   NtContinue  (1244336, 0, ...
 02988   280   NtContinue  (1244336, 0, ...
 02989   280   NtContinue  (1244336, 0, ...
 02990   280   NtContinue  (1244336, 0, ...
 02991   280   NtContinue  (1244336, 0, ...
 02992   280   NtContinue  (1244336, 0, ...
 02993   280   NtContinue  (1244336, 0, ...
 02994   280   NtContinue  (1244336, 0, ...
 02995   280   NtContinue  (1244336, 0, ...
 02996   280   NtContinue  (1244336, 0, ...
 02997   280   NtContinue  (1244336, 0, ...
 02998   280   NtContinue  (1244336, 0, ...
 02999   280   NtContinue  (1244336, 0, ...
 03000   280   NtContinue  (1244336, 0, ...
 03001   280   NtContinue  (1244336, 0, ...
 03002   280   NtContinue  (1244336, 0, ...
 03003   280   NtContinue  (1244336, 0, ...
 03004   280   NtContinue  (1244336, 0, ...
 03005   280   NtContinue  (1244336, 0, ...
 03006   280   NtContinue  (1244336, 0, ...
 03007   280   NtContinue  (1244336, 0, ...
 03008   280   NtContinue  (1244336, 0, ...
 03009   280   NtContinue  (1244336, 0, ...
 03010   280   NtContinue  (1244336, 0, ...
 03011   280   NtContinue  (1244336, 0, ...
 03012   280   NtContinue  (1244336, 0, ...
 03013   280   NtContinue  (1244336, 0, ...
 03014   280   NtContinue  (1244336, 0, ...
 03015   280   NtContinue  (1244336, 0, ...
 03016   280   NtContinue  (1244336, 0, ...
 03017   280   NtContinue  (1244336, 0, ...
 03018   280   NtContinue  (1244336, 0, ...
 03019   280   NtContinue  (1244336, 0, ...
 03020   280   NtContinue  (1244336, 0, ...
 03021   280   NtContinue  (1244336, 0, ...
 03022   280   NtContinue  (1244336, 0, ...
 03023   280   NtContinue  (1244336, 0, ...
 03024   280   NtContinue  (1244336, 0, ...
 03025   280   NtContinue  (1244336, 0, ...
 03026   280   NtContinue  (1244336, 0, ...
 03027   280   NtContinue  (1244336, 0, ...
 03028   280   NtContinue  (1244336, 0, ...
 03029   280   NtContinue  (1244336, 0, ...
 03030   280   NtContinue  (1244336, 0, ...
 03031   280   NtContinue  (1244336, 0, ...
 03032   280   NtContinue  (1244336, 0, ...
 03033   280   NtContinue  (1244336, 0, ...
 03034   280   NtContinue  (1244336, 0, ...
 03035   280   NtContinue  (1244336, 0, ...
 03036   280   NtContinue  (1244336, 0, ...
 03037   280   NtContinue  (1244336, 0, ...
 03038   280   NtContinue  (1244336, 0, ...
 03039   280   NtContinue  (1244336, 0, ...
 03040   280   NtContinue  (1244336, 0, ...
 03041   280   NtContinue  (1244336, 0, ...
 03042   280   NtContinue  (1244336, 0, ...
 03043   280   NtContinue  (1244336, 0, ...
 03044   280   NtContinue  (1244336, 0, ...
 03045   280   NtContinue  (1244336, 0, ...
 03046   280   NtContinue  (1244336, 0, ...
 03047   280   NtContinue  (1244336, 0, ...
 03048   280   NtContinue  (1244336, 0, ...
 03049   280   NtContinue  (1244336, 0, ...
 03050   280   NtContinue  (1244336, 0, ...
 03051   280   NtContinue  (1244336, 0, ...
 03052   280   NtContinue  (1244336, 0, ...
 03053   280   NtContinue  (1244336, 0, ...
 03054   280   NtContinue  (1244336, 0, ...
 03055   280   NtContinue  (1244336, 0, ...
 03056   280   NtContinue  (1244336, 0, ...
 03057   280   NtContinue  (1244336, 0, ...
 03058   280   NtContinue  (1244336, 0, ...
 03059   280   NtContinue  (1244336, 0, ...
 03060   280   NtContinue  (1244336, 0, ...
 03061   280   NtContinue  (1244336, 0, ...
 03062   280   NtContinue  (1244336, 0, ...
 03063   280   NtContinue  (1244336, 0, ...
 03064   280   NtContinue  (1244336, 0, ...
 03065   280   NtContinue  (1244336, 0, ...
 03066   280   NtContinue  (1244336, 0, ...
 03067   280   NtContinue  (1244336, 0, ...
 03068   280   NtContinue  (1244336, 0, ...
 03069   280   NtContinue  (1244336, 0, ...
 03070   280   NtContinue  (1244336, 0, ...
 03071   280   NtContinue  (1244336, 0, ...
 03072   280   NtContinue  (1244336, 0, ...
 03073   280   NtContinue  (1244336, 0, ...
 03074   280   NtContinue  (1244336, 0, ...
 03075   280   NtContinue  (1244336, 0, ...
 03076   280   NtContinue  (1244336, 0, ...
 03077   280   NtContinue  (1244336, 0, ...
 03078   280   NtContinue  (1244336, 0, ...
 03079   280   NtContinue  (1244336, 0, ...
 03080   280   NtContinue  (1244336, 0, ...
 03081   280   NtContinue  (1244336, 0, ...
 03082   280   NtContinue  (1244336, 0, ...
 03083   280   NtContinue  (1244336, 0, ...
 03084   280   NtContinue  (1244336, 0, ...
 03085   280   NtContinue  (1244336, 0, ...
 03086   280   NtContinue  (1244336, 0, ...
 03087   280   NtContinue  (1244336, 0, ...
 03088   280   NtContinue  (1244336, 0, ...
 03089   280   NtContinue  (1244336, 0, ...
 03090   280   NtContinue  (1244336, 0, ...
 03091   280   NtContinue  (1244336, 0, ...
 03092   280   NtContinue  (1244336, 0, ...
 03093   280   NtContinue  (1244336, 0, ...
 03094   280   NtContinue  (1244336, 0, ...
 03095   280   NtContinue  (1244336, 0, ...
 03096   280   NtContinue  (1244336, 0, ...
 03097   280   NtContinue  (1244336, 0, ...
 03098   280   NtContinue  (1244336, 0, ...
 03099   280   NtContinue  (1244336, 0, ...
 03100   280   NtContinue  (1244336, 0, ...
 03101   280   NtContinue  (1244336, 0, ...
 03102   280   NtContinue  (1244336, 0, ...
 03103   280   NtContinue  (1244336, 0, ...
 03104   280   NtContinue  (1244336, 0, ...
 03105   280   NtContinue  (1244336, 0, ...
 03106   280   NtContinue  (1244336, 0, ...
 03107   280   NtContinue  (1244336, 0, ...
 03108   280   NtContinue  (1244336, 0, ...
 03109   280   NtContinue  (1244336, 0, ...
 03110   280   NtContinue  (1244336, 0, ...
 03111   280   NtContinue  (1244336, 0, ...
 03112   280   NtContinue  (1244336, 0, ...
 03113   280   NtContinue  (1244336, 0, ...
 03114   280   NtContinue  (1244336, 0, ...
 03115   280   NtContinue  (1244336, 0, ...
 03116   280   NtContinue  (1244336, 0, ...
 03117   280   NtContinue  (1244336, 0, ...
 03118   280   NtContinue  (1244336, 0, ...
 03119   280   NtContinue  (1244336, 0, ...
 03120   280   NtContinue  (1244336, 0, ...
 03121   280   NtContinue  (1244336, 0, ...
 03122   280   NtContinue  (1244336, 0, ...
 03123   280   NtContinue  (1244336, 0, ...
 03124   280   NtContinue  (1244336, 0, ...
 03125   280   NtContinue  (1244336, 0, ...
 03126   280   NtContinue  (1244336, 0, ...
 03127   280   NtContinue  (1244336, 0, ...
 03128   280   NtContinue  (1244336, 0, ...
 03129   280   NtContinue  (1244336, 0, ...
 03130   280   NtContinue  (1244336, 0, ...
 03131   280   NtContinue  (1244336, 0, ...
 03132   280   NtContinue  (1244336, 0, ...
 03133   280   NtContinue  (1244336, 0, ...
 03134   280   NtContinue  (1244336, 0, ...
 03135   280   NtContinue  (1244336, 0, ...
 03136   280   NtContinue  (1244336, 0, ...
 03137   280   NtContinue  (1244336, 0, ...
 03138   280   NtContinue  (1244336, 0, ...
 03139   280   NtContinue  (1244336, 0, ...
 03140   280   NtContinue  (1244336, 0, ...
 03141   280   NtContinue  (1244336, 0, ...
 03142   280   NtContinue  (1244336, 0, ...
 03143   280   NtContinue  (1244336, 0, ...
 03144   280   NtContinue  (1244336, 0, ...
 03145   280   NtContinue  (1244336, 0, ...
 03146   280   NtContinue  (1244336, 0, ...
 03147   280   NtContinue  (1244336, 0, ...
 03148   280   NtContinue  (1244336, 0, ...
 03149   280   NtContinue  (1244336, 0, ...
 03150   280   NtContinue  (1244336, 0, ...
 03151   280   NtContinue  (1244336, 0, ...
 03152   280   NtContinue  (1244336, 0, ...
 03153   280   NtContinue  (1244336, 0, ...
 03154   280   NtContinue  (1244336, 0, ...
 03155   280   NtContinue  (1244336, 0, ...
 03156   280   NtContinue  (1244336, 0, ...
 03157   280   NtContinue  (1244336, 0, ...
 03158   280   NtContinue  (1244336, 0, ...
 03159   280   NtContinue  (1244336, 0, ...
 03160   280   NtContinue  (1244336, 0, ...
 03161   280   NtContinue  (1244336, 0, ...
 03162   280   NtContinue  (1244336, 0, ...
 03163   280   NtContinue  (1244336, 0, ...
 03164   280   NtContinue  (1244336, 0, ...
 03165   280   NtContinue  (1244336, 0, ...
 03166   280   NtContinue  (1244336, 0, ...
 03167   280   NtContinue  (1244336, 0, ...
 03168   280   NtContinue  (1244336, 0, ...
 03169   280   NtContinue  (1244336, 0, ...
 03170   280   NtContinue  (1244336, 0, ...
 03171   280   NtContinue  (1244336, 0, ...
 03172   280   NtContinue  (1244336, 0, ...
 03173   280   NtContinue  (1244336, 0, ...
 03174   280   NtContinue  (1244336, 0, ...
 03175   280   NtContinue  (1244336, 0, ...
 03176   280   NtContinue  (1244336, 0, ...
 03177   280   NtContinue  (1244336, 0, ...
 03178   280   NtContinue  (1244336, 0, ...
 03179   280   NtContinue  (1244336, 0, ...
 03180   280   NtContinue  (1244336, 0, ...
 03181   280   NtContinue  (1244336, 0, ...
 03182   280   NtContinue  (1244336, 0, ...
 03183   280   NtContinue  (1244336, 0, ...
 03184   280   NtContinue  (1244336, 0, ...
 03185   280   NtContinue  (1244336, 0, ...
 03186   280   NtContinue  (1244336, 0, ...
 03187   280   NtContinue  (1244336, 0, ...
 03188   280   NtContinue  (1244336, 0, ...
 03189   280   NtContinue  (1244336, 0, ...
 03190   280   NtContinue  (1244336, 0, ...
 03191   280   NtContinue  (1244336, 0, ...
 03192   280   NtContinue  (1244336, 0, ...
 03193   280   NtContinue  (1244336, 0, ...
 03194   280   NtContinue  (1244336, 0, ...
 03195   280   NtContinue  (1244336, 0, ...
 03196   280   NtContinue  (1244336, 0, ...
 03197   280   NtContinue  (1244336, 0, ...
 03198   280   NtContinue  (1244336, 0, ...
 03199   280   NtContinue  (1244336, 0, ...
 03200   280   NtContinue  (1244336, 0, ...
 03201   280   NtContinue  (1244336, 0, ...
 03202   280   NtContinue  (1244336, 0, ...
 03203   280   NtContinue  (1244336, 0, ...
 03204   280   NtContinue  (1244336, 0, ...
 03205   280   NtContinue  (1244336, 0, ...
 03206   280   NtContinue  (1244336, 0, ...
 03207   280   NtContinue  (1244336, 0, ...
 03208   280   NtContinue  (1244336, 0, ...
 03209   280   NtContinue  (1244336, 0, ...
 03210   280   NtContinue  (1244336, 0, ...
 03211   280   NtContinue  (1244336, 0, ...
 03212   280   NtContinue  (1244336, 0, ...
 03213   280   NtContinue  (1244336, 0, ...
 03214   280   NtContinue  (1244336, 0, ...
 03215   280   NtContinue  (1244336, 0, ...
 03216   280   NtContinue  (1244336, 0, ...
 03217   280   NtContinue  (1244336, 0, ...
 03218   280   NtContinue  (1244336, 0, ...
 03219   280   NtContinue  (1244336, 0, ...
 03220   280   NtContinue  (1244336, 0, ...
 03221   280   NtContinue  (1244336, 0, ...
 03222   280   NtContinue  (1244336, 0, ...
 03223   280   NtContinue  (1244336, 0, ...
 03224   280   NtContinue  (1244336, 0, ...
 03225   280   NtContinue  (1244336, 0, ...
 03226   280   NtContinue  (1244336, 0, ...
 03227   280   NtContinue  (1244336, 0, ...
 03228   280   NtContinue  (1244336, 0, ...
 03229   280   NtContinue  (1244336, 0, ...
 03230   280   NtContinue  (1244336, 0, ...
 03231   280   NtContinue  (1244336, 0, ...
 03232   280   NtContinue  (1244336, 0, ...
 03233   280   NtContinue  (1244336, 0, ...
 03234   280   NtContinue  (1244336, 0, ...
 03235   280   NtContinue  (1244336, 0, ...
 03236   280   NtContinue  (1244336, 0, ...
 03237   280   NtContinue  (1244336, 0, ...
 03238   280   NtContinue  (1244336, 0, ...
 03239   280   NtContinue  (1244336, 0, ...
 03240   280   NtContinue  (1244336, 0, ...
 03241   280   NtContinue  (1244336, 0, ...
 03242   280   NtContinue  (1244336, 0, ...
 03243   280   NtContinue  (1244336, 0, ...
 03244   280   NtContinue  (1244336, 0, ...
 03245   280   NtContinue  (1244336, 0, ...
 03246   280   NtContinue  (1244336, 0, ...
 03247   280   NtContinue  (1244336, 0, ...
 03248   280   NtContinue  (1244336, 0, ...
 03249   280   NtContinue  (1244336, 0, ...
 03250   280   NtContinue  (1244336, 0, ...
 03251   280   NtContinue  (1244336, 0, ...
 03252   280   NtContinue  (1244336, 0, ...
 03253   280   NtContinue  (1244336, 0, ...
 03254   280   NtContinue  (1244336, 0, ...
 03255   280   NtContinue  (1244336, 0, ...
 03256   280   NtContinue  (1244336, 0, ...
 03257   280   NtContinue  (1244336, 0, ...
 03258   280   NtContinue  (1244336, 0, ...
 03259   280   NtContinue  (1244336, 0, ...
 03260   280   NtContinue  (1244336, 0, ...
 03261   280   NtContinue  (1244336, 0, ...
 03262   280   NtContinue  (1244336, 0, ...
 03263   280   NtContinue  (1244336, 0, ...
 03264   280   NtContinue  (1244336, 0, ...
 03265   280   NtContinue  (1244336, 0, ...
 03266   280   NtContinue  (1244336, 0, ...
 03267   280   NtContinue  (1244336, 0, ...
 03268   280   NtContinue  (1244336, 0, ...
 03269   280   NtContinue  (1244336, 0, ...
 03270   280   NtContinue  (1244336, 0, ...
 03271   280   NtContinue  (1244336, 0, ...
 03272   280   NtContinue  (1244336, 0, ...
 03273   280   NtContinue  (1244336, 0, ...
 03274   280   NtContinue  (1244336, 0, ...
 03275   280   NtContinue  (1244336, 0, ...
 03276   280   NtContinue  (1244336, 0, ...
 03277   280   NtContinue  (1244336, 0, ...
 03278   280   NtContinue  (1244336, 0, ...
 03279   280   NtContinue  (1244336, 0, ...
 03280   280   NtContinue  (1244336, 0, ...
 03281   280   NtContinue  (1244336, 0, ...
 03282   280   NtContinue  (1244336, 0, ...
 03283   280   NtContinue  (1244336, 0, ...
 03284   280   NtContinue  (1244336, 0, ...
 03285   280   NtContinue  (1244336, 0, ...
 03286   280   NtContinue  (1244336, 0, ...
 03287   280   NtContinue  (1244336, 0, ...
 03288   280   NtContinue  (1244336, 0, ...
 03289   280   NtContinue  (1244336, 0, ...
 03290   280   NtContinue  (1244336, 0, ...
 03291   280   NtContinue  (1244336, 0, ...
 03292   280   NtContinue  (1244336, 0, ...
 03293   280   NtContinue  (1244336, 0, ...
 03294   280   NtContinue  (1244336, 0, ...
 03295   280   NtContinue  (1244336, 0, ...
 03296   280   NtContinue  (1244336, 0, ...
 03297   280   NtContinue  (1244336, 0, ...
 03298   280   NtContinue  (1244336, 0, ...
 03299   280   NtContinue  (1244336, 0, ...
 03300   280   NtContinue  (1244336, 0, ...
 03301   280   NtContinue  (1244336, 0, ...
 03302   280   NtContinue  (1244336, 0, ...
 03303   280   NtContinue  (1244336, 0, ...
 03304   280   NtContinue  (1244336, 0, ...
 03305   280   NtContinue  (1244336, 0, ...
 03306   280   NtContinue  (1244336, 0, ...
 03307   280   NtContinue  (1244336, 0, ...
 03308   280   NtContinue  (1244336, 0, ...
 03309   280   NtContinue  (1244336, 0, ...
 03310   280   NtContinue  (1244336, 0, ...
 03311   280   NtContinue  (1244336, 0, ...
 03312   280   NtContinue  (1244336, 0, ...
 03313   280   NtContinue  (1244336, 0, ...
 03314   280   NtContinue  (1244336, 0, ...
 03315   280   NtContinue  (1244336, 0, ...
 03316   280   NtContinue  (1244336, 0, ...
 03317   280   NtContinue  (1244336, 0, ...
 03318   280   NtContinue  (1244336, 0, ...
 03319   280   NtContinue  (1244336, 0, ...
 03320   280   NtContinue  (1244336, 0, ...
 03321   280   NtContinue  (1244336, 0, ...
 03322   280   NtContinue  (1244336, 0, ...
 03323   280   NtContinue  (1244336, 0, ...
 03324   280   NtContinue  (1244336, 0, ...
 03325   280   NtContinue  (1244336, 0, ...
 03326   280   NtContinue  (1244336, 0, ...
 03327   280   NtContinue  (1244336, 0, ...
 03328   280   NtContinue  (1244336, 0, ...
 03329   280   NtContinue  (1244336, 0, ...
 03330   280   NtContinue  (1244336, 0, ...
 03331   280   NtContinue  (1244336, 0, ...
 03332   280   NtContinue  (1244336, 0, ...
 03333   280   NtContinue  (1244336, 0, ...
 03334   280   NtContinue  (1244336, 0, ...
 03335   280   NtContinue  (1244336, 0, ...
 03336   280   NtContinue  (1244336, 0, ...
 03337   280   NtContinue  (1244336, 0, ...
 03338   280   NtContinue  (1244336, 0, ...
 03339   280   NtContinue  (1244336, 0, ...
 03340   280   NtContinue  (1244336, 0, ...
 03341   280   NtContinue  (1244336, 0, ...
 03342   280   NtContinue  (1244336, 0, ...
 03343   280   NtContinue  (1244336, 0, ...
 03344   280   NtContinue  (1244336, 0, ...
 03345   280   NtContinue  (1244336, 0, ...
 03346   280   NtContinue  (1244336, 0, ...
 03347   280   NtContinue  (1244336, 0, ...
 03348   280   NtContinue  (1244336, 0, ...
 03349   280   NtContinue  (1244336, 0, ...
 03350   280   NtContinue  (1244336, 0, ...
 03351   280   NtContinue  (1244336, 0, ...
 03352   280   NtContinue  (1244336, 0, ...
 03353   280   NtContinue  (1244336, 0, ...
 03354   280   NtContinue  (1244336, 0, ...
 03355   280   NtContinue  (1244336, 0, ...
 03356   280   NtContinue  (1244336, 0, ...
 03357   280   NtContinue  (1244336, 0, ...
 03358   280   NtContinue  (1244336, 0, ...
 03359   280   NtContinue  (1244336, 0, ...
 03360   280   NtContinue  (1244336, 0, ...
 03361   280   NtContinue  (1244336, 0, ...
 03362   280   NtContinue  (1244336, 0, ...
 03363   280   NtContinue  (1244336, 0, ...
 03364   280   NtContinue  (1244336, 0, ...
 03365   280   NtContinue  (1244336, 0, ...
 03366   280   NtContinue  (1244336, 0, ...
 03367   280   NtContinue  (1244336, 0, ...
 03368   280   NtContinue  (1244336, 0, ...
 03369   280   NtContinue  (1244336, 0, ...
 03370   280   NtContinue  (1244336, 0, ...
 03371   280   NtContinue  (1244336, 0, ...
 03372   280   NtContinue  (1244336, 0, ...
 03373   280   NtContinue  (1244336, 0, ...
 03374   280   NtContinue  (1244336, 0, ...
 03375   280   NtContinue  (1244336, 0, ...
 03376   280   NtContinue  (1244336, 0, ...
 03377   280   NtContinue  (1244336, 0, ...
 03378   280   NtContinue  (1244336, 0, ...
 03379   280   NtContinue  (1244336, 0, ...
 03380   280   NtContinue  (1244336, 0, ...
 03381   280   NtContinue  (1244336, 0, ...
 03382   280   NtContinue  (1244336, 0, ...
 03383   280   NtContinue  (1244336, 0, ...
 03384   280   NtContinue  (1244336, 0, ...
 03385   280   NtContinue  (1244336, 0, ...
 03386   280   NtContinue  (1244336, 0, ...
 03387   280   NtContinue  (1244336, 0, ...
 03388   280   NtContinue  (1244336, 0, ...
 03389   280   NtContinue  (1244336, 0, ...
 03390   280   NtContinue  (1244336, 0, ...
 03391   280   NtContinue  (1244336, 0, ...
 03392   280   NtContinue  (1244336, 0, ...
 03393   280   NtContinue  (1244336, 0, ...
 03394   280   NtContinue  (1244336, 0, ...
 03395   280   NtContinue  (1244336, 0, ...
 03396   280   NtContinue  (1244336, 0, ...
 03397   280   NtContinue  (1244336, 0, ...
 03398   280   NtContinue  (1244336, 0, ...
 03399   280   NtContinue  (1244336, 0, ...
 03400   280   NtContinue  (1244336, 0, ...
 03401   280   NtContinue  (1244336, 0, ...
 03402   280   NtContinue  (1244336, 0, ...
 03403   280   NtContinue  (1244336, 0, ...
 03404   280   NtContinue  (1244336, 0, ...
 03405   280   NtContinue  (1244336, 0, ...
 03406   280   NtContinue  (1244336, 0, ...
 03407   280   NtContinue  (1244336, 0, ...
 03408   280   NtContinue  (1244336, 0, ...
 03409   280   NtContinue  (1244336, 0, ...
 03410   280   NtContinue  (1244336, 0, ...
 03411   280   NtContinue  (1244336, 0, ...
 03412   280   NtContinue  (1244336, 0, ...
 03413   280   NtContinue  (1244336, 0, ...
 03414   280   NtContinue  (1244336, 0, ...
 03415   280   NtContinue  (1244336, 0, ...
 03416   280   NtContinue  (1244336, 0, ...
 03417   280   NtContinue  (1244336, 0, ...
 03418   280   NtContinue  (1244336, 0, ...
 03419   280   NtContinue  (1244336, 0, ...
 03420   280   NtContinue  (1244336, 0, ...
 03421   280   NtContinue  (1244336, 0, ...
 03422   280   NtContinue  (1244336, 0, ...
 03423   280   NtContinue  (1244336, 0, ...
 03424   280   NtContinue  (1244336, 0, ...
 03425   280   NtContinue  (1244336, 0, ...
 03426   280   NtContinue  (1244336, 0, ...
 03427   280   NtContinue  (1244336, 0, ...
 03428   280   NtContinue  (1244336, 0, ...
 03429   280   NtContinue  (1244336, 0, ...
 03430   280   NtContinue  (1244336, 0, ...
 03431   280   NtContinue  (1244336, 0, ...
 03432   280   NtContinue  (1244336, 0, ...
 03433   280   NtContinue  (1244336, 0, ...
 03434   280   NtContinue  (1244336, 0, ...
 03435   280   NtContinue  (1244336, 0, ...
 03436   280   NtContinue  (1244336, 0, ...
 03437   280   NtContinue  (1244336, 0, ...
 03438   280   NtContinue  (1244336, 0, ...
 03439   280   NtContinue  (1244336, 0, ...
 03440   280   NtContinue  (1244336, 0, ...
 03441   280   NtContinue  (1244336, 0, ...
 03442   280   NtContinue  (1244336, 0, ...
 03443   280   NtContinue  (1244336, 0, ...
 03444   280   NtContinue  (1244336, 0, ...
 03445   280   NtContinue  (1244336, 0, ...
 03446   280   NtContinue  (1244336, 0, ...
 03447   280   NtContinue  (1244336, 0, ...
 03448   280   NtContinue  (1244336, 0, ...
 03449   280   NtContinue  (1244336, 0, ...
 03450   280   NtContinue  (1244336, 0, ...
 03451   280   NtContinue  (1244336, 0, ...
 03452   280   NtContinue  (1244336, 0, ...
 03453   280   NtContinue  (1244336, 0, ...
 03454   280   NtContinue  (1244336, 0, ...
 03455   280   NtContinue  (1244336, 0, ...
 03456   280   NtContinue  (1244336, 0, ...
 03457   280   NtContinue  (1244336, 0, ...
 03458   280   NtContinue  (1244336, 0, ...
 03459   280   NtContinue  (1244336, 0, ...
 03460   280   NtContinue  (1244336, 0, ...
 03461   280   NtContinue  (1244336, 0, ...
 03462   280   NtContinue  (1244336, 0, ...
 03463   280   NtContinue  (1244336, 0, ...
 03464   280   NtContinue  (1244336, 0, ...
 03465   280   NtContinue  (1244336, 0, ...
 03466   280   NtContinue  (1244336, 0, ...
 03467   280   NtContinue  (1244336, 0, ...
 03468   280   NtContinue  (1244336, 0, ...
 03469   280   NtContinue  (1244336, 0, ...
 03470   280   NtContinue  (1244336, 0, ...
 03471   280   NtContinue  (1244336, 0, ...
 03472   280   NtContinue  (1244336, 0, ...
 03473   280   NtContinue  (1244336, 0, ...
 03474   280   NtContinue  (1244336, 0, ...
 03475   280   NtContinue  (1244336, 0, ...
 03476   280   NtContinue  (1244336, 0, ...
 03477   280   NtContinue  (1244336, 0, ...
 03478   280   NtContinue  (1244336, 0, ...
 03479   280   NtContinue  (1244336, 0, ...
 03480   280   NtContinue  (1244336, 0, ...
 03481   280   NtContinue  (1244336, 0, ...
 03482   280   NtContinue  (1244336, 0, ...
 03483   280   NtContinue  (1244336, 0, ...
 03484   280   NtContinue  (1244336, 0, ...
 03485   280   NtContinue  (1244336, 0, ...
 03486   280   NtContinue  (1244336, 0, ...
 03487   280   NtContinue  (1244336, 0, ...
 03488   280   NtContinue  (1244336, 0, ...
 03489   280   NtContinue  (1244336, 0, ...
 03490   280   NtContinue  (1244336, 0, ...
 03491   280   NtContinue  (1244336, 0, ...
 03492   280   NtContinue  (1244336, 0, ...
 03493   280   NtContinue  (1244336, 0, ...
 03494   280   NtContinue  (1244336, 0, ...
 03495   280   NtContinue  (1244336, 0, ...
 03496   280   NtContinue  (1244336, 0, ...
 03497   280   NtContinue  (1244336, 0, ...
 03498   280   NtContinue  (1244336, 0, ...
 03499   280   NtContinue  (1244336, 0, ...
 03500   280   NtContinue  (1244336, 0, ...
 03501   280   NtContinue  (1244336, 0, ...
 03502   280   NtContinue  (1244336, 0, ...
 03503   280   NtContinue  (1244336, 0, ...
 03504   280   NtContinue  (1244336, 0, ...
 03505   280   NtContinue  (1244336, 0, ...
 03506   280   NtContinue  (1244336, 0, ...
 03507   280   NtContinue  (1244336, 0, ...
 03508   280   NtContinue  (1244336, 0, ...
 03509   280   NtContinue  (1244336, 0, ...
 03510   280   NtContinue  (1244336, 0, ...
 03511   280   NtContinue  (1244336, 0, ...
 03512   280   NtContinue  (1244336, 0, ...
 03513   280   NtContinue  (1244336, 0, ...
 03514   280   NtContinue  (1244336, 0, ...
 03515   280   NtContinue  (1244336, 0, ...
 03516   280   NtContinue  (1244336, 0, ...
 03517   280   NtContinue  (1244336, 0, ...
 03518   280   NtContinue  (1244336, 0, ...
 03519   280   NtContinue  (1244336, 0, ...
 03520   280   NtContinue  (1244336, 0, ...
 03521   280   NtContinue  (1244336, 0, ...
 03522   280   NtContinue  (1244336, 0, ...
 03523   280   NtContinue  (1244336, 0, ...
 03524   280   NtContinue  (1244336, 0, ...
 03525   280   NtContinue  (1244336, 0, ...
 03526   280   NtContinue  (1244336, 0, ...
 03527   280   NtContinue  (1244336, 0, ...
 03528   280   NtContinue  (1244336, 0, ...
 03529   280   NtContinue  (1244336, 0, ...
 03530   280   NtContinue  (1244336, 0, ...
 03531   280   NtContinue  (1244336, 0, ...
 03532   280   NtContinue  (1244336, 0, ...
 03533   280   NtContinue  (1244336, 0, ...
 03534   280   NtContinue  (1244336, 0, ...
 03535   280   NtContinue  (1244336, 0, ...
 03536   280   NtContinue  (1244336, 0, ...
 03537   280   NtContinue  (1244336, 0, ...
 03538   280   NtContinue  (1244336, 0, ...
 03539   280   NtContinue  (1244336, 0, ...
 03540   280   NtContinue  (1244336, 0, ...
 03541   280   NtContinue  (1244336, 0, ...
 03542   280   NtContinue  (1244336, 0, ...
 03543   280   NtContinue  (1244336, 0, ...
 03544   280   NtContinue  (1244336, 0, ...
 03545   280   NtContinue  (1244336, 0, ...
 03546   280   NtContinue  (1244336, 0, ...
 03547   280   NtContinue  (1244336, 0, ...
 03548   280   NtContinue  (1244336, 0, ...
 03549   280   NtContinue  (1244336, 0, ...
 03550   280   NtContinue  (1244336, 0, ...
 03551   280   NtContinue  (1244336, 0, ...
 03552   280   NtContinue  (1244336, 0, ...
 03553   280   NtContinue  (1244336, 0, ...
 03554   280   NtContinue  (1244336, 0, ...
 03555   280   NtContinue  (1244336, 0, ...
 03556   280   NtContinue  (1244336, 0, ...
 03557   280   NtContinue  (1244336, 0, ...
 03558   280   NtContinue  (1244336, 0, ...
 03559   280   NtContinue  (1244336, 0, ...
 03560   280   NtContinue  (1244336, 0, ...
 03561   280   NtContinue  (1244336, 0, ...
 03562   280   NtContinue  (1244336, 0, ...
 03563   280   NtContinue  (1244336, 0, ...
 03564   280   NtContinue  (1244336, 0, ...
 03565   280   NtContinue  (1244336, 0, ...
 03566   280   NtContinue  (1244336, 0, ...
 03567   280   NtContinue  (1244336, 0, ...
 03568   280   NtContinue  (1244336, 0, ...
 03569   280   NtContinue  (1244336, 0, ...
 03570   280   NtContinue  (1244336, 0, ...
 03571   280   NtContinue  (1244336, 0, ...
 03572   280   NtContinue  (1244336, 0, ...
 03573   280   NtContinue  (1244336, 0, ...
 03574   280   NtContinue  (1244336, 0, ...
 03575   280   NtContinue  (1244336, 0, ...
 03576   280   NtContinue  (1244336, 0, ...
 03577   280   NtContinue  (1244336, 0, ...
 03578   280   NtContinue  (1244336, 0, ...
 03579   280   NtContinue  (1244336, 0, ...
 03580   280   NtContinue  (1244336, 0, ...
 03581   280   NtContinue  (1244336, 0, ...
 03582   280   NtContinue  (1244336, 0, ...
 03583   280   NtContinue  (1244336, 0, ...
 03584   280   NtContinue  (1244336, 0, ...
 03585   280   NtContinue  (1244336, 0, ...
 03586   280   NtContinue  (1244336, 0, ...
 03587   280   NtContinue  (1244336, 0, ...
 03588   280   NtContinue  (1244336, 0, ...
 03589   280   NtContinue  (1244336, 0, ...
 03590   280   NtContinue  (1244336, 0, ...
 03591   280   NtContinue  (1244336, 0, ...
 03592   280   NtContinue  (1244336, 0, ...
 03593   280   NtContinue  (1244336, 0, ...
 03594   280   NtContinue  (1244336, 0, ...
 03595   280   NtContinue  (1244336, 0, ...
 03596   280   NtContinue  (1244336, 0, ...
 03597   280   NtContinue  (1244336, 0, ...
 03598   280   NtContinue  (1244336, 0, ...
 03599   280   NtContinue  (1244336, 0, ...
 03600   280   NtContinue  (1244336, 0, ...
 03601   280   NtContinue  (1244336, 0, ...
 03602   280   NtContinue  (1244336, 0, ...
 03603   280   NtContinue  (1244336, 0, ...
 03604   280   NtContinue  (1244336, 0, ...
 03605   280   NtContinue  (1244336, 0, ...
 03606   280   NtContinue  (1244336, 0, ...
 03607   280   NtContinue  (1244336, 0, ...
 03608   280   NtContinue  (1244336, 0, ...
 03609   280   NtContinue  (1244336, 0, ...
 03610   280   NtContinue  (1244336, 0, ...
 03611   280   NtContinue  (1244336, 0, ...
 03612   280   NtContinue  (1244336, 0, ...
 03613   280   NtContinue  (1244336, 0, ...
 03614   280   NtContinue  (1244336, 0, ...
 03615   280   NtContinue  (1244336, 0, ...
 03616   280   NtContinue  (1244336, 0, ...
 03617   280   NtContinue  (1244336, 0, ...
 03618   280   NtContinue  (1244336, 0, ...
 03619   280   NtContinue  (1244336, 0, ...
 03620   280   NtContinue  (1244336, 0, ...
 03621   280   NtContinue  (1244336, 0, ...
 03622   280   NtContinue  (1244336, 0, ...
 03623   280   NtContinue  (1244336, 0, ...
 03624   280   NtContinue  (1244336, 0, ...
 03625   280   NtContinue  (1244336, 0, ...
 03626   280   NtContinue  (1244336, 0, ...
 03627   280   NtContinue  (1244336, 0, ...
 03628   280   NtContinue  (1244336, 0, ...
 03629   280   NtContinue  (1244336, 0, ...
 03630   280   NtContinue  (1244336, 0, ...
 03631   280   NtContinue  (1244336, 0, ...
 03632   280   NtContinue  (1244336, 0, ...
 03633   280   NtContinue  (1244336, 0, ...
 03634   280   NtContinue  (1244336, 0, ...
 03635   280   NtContinue  (1244336, 0, ...
 03636   280   NtContinue  (1244336, 0, ...
 03637   280   NtContinue  (1244336, 0, ...
 03638   280   NtContinue  (1244336, 0, ...
 03639   280   NtContinue  (1244336, 0, ...
 03640   280   NtContinue  (1244336, 0, ...
 03641   280   NtContinue  (1244336, 0, ...
 03642   280   NtContinue  (1244336, 0, ...
 03643   280   NtContinue  (1244336, 0, ...
 03644   280   NtContinue  (1244336, 0, ...
 03645   280   NtContinue  (1244336, 0, ...
 03646   280   NtContinue  (1244336, 0, ...
 03647   280   NtContinue  (1244336, 0, ...
 03648   280   NtContinue  (1244336, 0, ...
 03649   280   NtContinue  (1244336, 0, ...
 03650   280   NtContinue  (1244336, 0, ...
 03651   280   NtContinue  (1244336, 0, ...
 03652   280   NtContinue  (1244336, 0, ...
 03653   280   NtContinue  (1244336, 0, ...
 03654   280   NtContinue  (1244336, 0, ...
 03655   280   NtContinue  (1244336, 0, ...
 03656   280   NtContinue  (1244336, 0, ...
 03657   280   NtContinue  (1244336, 0, ...
 03658   280   NtContinue  (1244336, 0, ...
 03659   280   NtContinue  (1244336, 0, ...
 03660   280   NtContinue  (1244336, 0, ...
 03661   280   NtContinue  (1244336, 0, ...
 03662   280   NtContinue  (1244336, 0, ...
 03663   280   NtContinue  (1244336, 0, ...
 03664   280   NtContinue  (1244336, 0, ...
 03665   280   NtContinue  (1244336, 0, ...
 03666   280   NtContinue  (1244336, 0, ...
 03667   280   NtContinue  (1244336, 0, ...
 03668   280   NtContinue  (1244336, 0, ...
 03669   280   NtContinue  (1244336, 0, ...
 03670   280   NtContinue  (1244336, 0, ...
 03671   280   NtContinue  (1244336, 0, ...
 03672   280   NtContinue  (1244336, 0, ...
 03673   280   NtContinue  (1244336, 0, ...
 03674   280   NtContinue  (1244336, 0, ...
 03675   280   NtContinue  (1244336, 0, ...
 03676   280   NtContinue  (1244336, 0, ...
 03677   280   NtContinue  (1244336, 0, ...
 03678   280   NtContinue  (1244336, 0, ...
 03679   280   NtContinue  (1244336, 0, ...
 03680   280   NtContinue  (1244336, 0, ...
 03681   280   NtContinue  (1244336, 0, ...
 03682   280   NtContinue  (1244336, 0, ...
 03683   280   NtContinue  (1244336, 0, ...
 03684   280   NtContinue  (1244336, 0, ...
 03685   280   NtContinue  (1244336, 0, ...
 03686   280   NtContinue  (1244336, 0, ...
 03687   280   NtContinue  (1244336, 0, ...
 03688   280   NtContinue  (1244336, 0, ...
 03689   280   NtContinue  (1244336, 0, ...
 03690   280   NtContinue  (1244336, 0, ...
 03691   280   NtContinue  (1244336, 0, ...
 03692   280   NtContinue  (1244336, 0, ...
 03693   280   NtContinue  (1244336, 0, ...
 03694   280   NtContinue  (1244336, 0, ...
 03695   280   NtContinue  (1244336, 0, ...
 03696   280   NtContinue  (1244336, 0, ...
 03697   280   NtContinue  (1244336, 0, ...
 03698   280   NtContinue  (1244336, 0, ...
 03699   280   NtContinue  (1244336, 0, ...
 03700   280   NtContinue  (1244336, 0, ...
 03701   280   NtContinue  (1244336, 0, ...
 03702   280   NtContinue  (1244336, 0, ...
 03703   280   NtContinue  (1244336, 0, ...
 03704   280   NtContinue  (1244336, 0, ...
 03705   280   NtContinue  (1244336, 0, ...
 03706   280   NtContinue  (1244336, 0, ...
 03707   280   NtContinue  (1244336, 0, ...
 03708   280   NtContinue  (1244336, 0, ...
 03709   280   NtContinue  (1244336, 0, ...
 03710   280   NtContinue  (1244336, 0, ...
 03711   280   NtContinue  (1244336, 0, ...
 03712   280   NtContinue  (1244336, 0, ...
 03713   280   NtContinue  (1244336, 0, ...
 03714   280   NtContinue  (1244336, 0, ...
 03715   280   NtContinue  (1244336, 0, ...
 03716   280   NtContinue  (1244336, 0, ...
 03717   280   NtContinue  (1244336, 0, ...
 03718   280   NtContinue  (1244336, 0, ...
 03719   280   NtContinue  (1244336, 0, ...
 03720   280   NtContinue  (1244336, 0, ...
 03721   280   NtContinue  (1244336, 0, ...
 03722   280   NtContinue  (1244336, 0, ...
 03723   280   NtContinue  (1244336, 0, ...
 03724   280   NtContinue  (1244336, 0, ...
 03725   280   NtContinue  (1244336, 0, ...
 03726   280   NtContinue  (1244336, 0, ...
 03727   280   NtContinue  (1244336, 0, ...
 03728   280   NtContinue  (1244336, 0, ...
 03729   280   NtContinue  (1244336, 0, ...
 03730   280   NtContinue  (1244336, 0, ...
 03731   280   NtContinue  (1244336, 0, ...
 03732   280   NtContinue  (1244336, 0, ...
 03733   280   NtContinue  (1244336, 0, ...
 03734   280   NtContinue  (1244336, 0, ...
 03735   280   NtContinue  (1244336, 0, ...
 03736   280   NtContinue  (1244336, 0, ...
 03737   280   NtContinue  (1244336, 0, ...
 03738   280   NtContinue  (1244336, 0, ...
 03739   280   NtContinue  (1244336, 0, ...
 03740   280   NtContinue  (1244336, 0, ...
 03741   280   NtContinue  (1244336, 0, ...
 03742   280   NtContinue  (1244336, 0, ...
 03743   280   NtContinue  (1244336, 0, ...
 03744   280   NtContinue  (1244336, 0, ...
 03745   280   NtContinue  (1244336, 0, ...
 03746   280   NtContinue  (1244336, 0, ...
 03747   280   NtContinue  (1244336, 0, ...
 03748   280   NtContinue  (1244336, 0, ...
 03749   280   NtContinue  (1244336, 0, ...
 03750   280   NtContinue  (1244336, 0, ...
 03751   280   NtContinue  (1244336, 0, ...
 03752   280   NtContinue  (1244336, 0, ...
 03753   280   NtContinue  (1244336, 0, ...
 03754   280   NtContinue  (1244336, 0, ...
 03755   280   NtContinue  (1244336, 0, ...
 03756   280   NtContinue  (1244336, 0, ...
 03757   280   NtContinue  (1244336, 0, ...
 03758   280   NtContinue  (1244336, 0, ...
 03759   280   NtContinue  (1244336, 0, ...
 03760   280   NtContinue  (1244336, 0, ...
 03761   280   NtContinue  (1244336, 0, ...
 03762   280   NtContinue  (1244336, 0, ...
 03763   280   NtContinue  (1244336, 0, ...
 03764   280   NtContinue  (1244336, 0, ...
 03765   280   NtContinue  (1244336, 0, ...
 03766   280   NtContinue  (1244336, 0, ...
 03767   280   NtContinue  (1244336, 0, ...
 03768   280   NtContinue  (1244336, 0, ...
 03769   280   NtContinue  (1244336, 0, ...
 03770   280   NtContinue  (1244336, 0, ...
 03771   280   NtContinue  (1244336, 0, ...
 03772   280   NtContinue  (1244336, 0, ...
 03773   280   NtContinue  (1244336, 0, ...
 03774   280   NtContinue  (1244336, 0, ...
 03775   280   NtContinue  (1244336, 0, ...
 03776   280   NtContinue  (1244336, 0, ...
 03777   280   NtContinue  (1244336, 0, ...
 03778   280   NtContinue  (1244336, 0, ...
 03779   280   NtContinue  (1244336, 0, ...
 03780   280   NtContinue  (1244336, 0, ...
 03781   280   NtContinue  (1244336, 0, ...
 03782   280   NtContinue  (1244336, 0, ...
 03783   280   NtContinue  (1244336, 0, ...
 03784   280   NtContinue  (1244336, 0, ...
 03785   280   NtContinue  (1244336, 0, ...
 03786   280   NtContinue  (1244336, 0, ...
 03787   280   NtContinue  (1244336, 0, ...
 03788   280   NtContinue  (1244336, 0, ...
 03789   280   NtContinue  (1244336, 0, ...
 03790   280   NtContinue  (1244336, 0, ...
 03791   280   NtContinue  (1244336, 0, ...
 03792   280   NtContinue  (1244336, 0, ...
 03793   280   NtContinue  (1244336, 0, ...
 03794   280   NtContinue  (1244336, 0, ...
 03795   280   NtContinue  (1244336, 0, ...
 03796   280   NtContinue  (1244336, 0, ...
 03797   280   NtContinue  (1244336, 0, ...
 03798   280   NtContinue  (1244336, 0, ...
 03799   280   NtContinue  (1244336, 0, ...
 03800   280   NtContinue  (1244336, 0, ...
 03801   280   NtContinue  (1244336, 0, ...
 03802   280   NtContinue  (1244336, 0, ...
 03803   280   NtContinue  (1244336, 0, ...
 03804   280   NtContinue  (1244336, 0, ...
 03805   280   NtContinue  (1244336, 0, ...
 03806   280   NtContinue  (1244336, 0, ...
 03807   280   NtContinue  (1244336, 0, ...
 03808   280   NtContinue  (1244336, 0, ...
 03809   280   NtContinue  (1244336, 0, ...
 03810   280   NtContinue  (1244336, 0, ...
 03811   280   NtContinue  (1244336, 0, ...
 03812   280   NtContinue  (1244336, 0, ...
 03813   280   NtContinue  (1244336, 0, ...
 03814   280   NtContinue  (1244336, 0, ...
 03815   280   NtContinue  (1244336, 0, ...
 03816   280   NtContinue  (1244336, 0, ...
 03817   280   NtContinue  (1244336, 0, ...
 03818   280   NtContinue  (1244336, 0, ...
 03819   280   NtContinue  (1244336, 0, ...
 03820   280   NtContinue  (1244336, 0, ...
 03821   280   NtContinue  (1244336, 0, ...
 03822   280   NtContinue  (1244336, 0, ...
 03823   280   NtContinue  (1244336, 0, ...
 03824   280   NtContinue  (1244336, 0, ...
 03825   280   NtContinue  (1244336, 0, ...
 03826   280   NtContinue  (1244336, 0, ...
 03827   280   NtContinue  (1244336, 0, ...
 03828   280   NtContinue  (1244336, 0, ...
 03829   280   NtContinue  (1244336, 0, ...
 03830   280   NtContinue  (1244336, 0, ...
 03831   280   NtContinue  (1244336, 0, ...
 03832   280   NtContinue  (1244336, 0, ...
 03833   280   NtContinue  (1244336, 0, ...
 03834   280   NtContinue  (1244336, 0, ...
 03835   280   NtContinue  (1244336, 0, ...
 03836   280   NtContinue  (1244336, 0, ...
 03837   280   NtContinue  (1244336, 0, ...
 03838   280   NtContinue  (1244336, 0, ...
 03839   280   NtContinue  (1244336, 0, ...
 03840   280   NtContinue  (1244336, 0, ...
 03841   280   NtContinue  (1244336, 0, ...
 03842   280   NtContinue  (1244336, 0, ...
 03843   280   NtContinue  (1244336, 0, ...
 03844   280   NtContinue  (1244336, 0, ...
 03845   280   NtContinue  (1244336, 0, ...
 03846   280   NtContinue  (1244336, 0, ...
 03847   280   NtContinue  (1244336, 0, ...
 03848   280   NtContinue  (1244336, 0, ...
 03849   280   NtContinue  (1244336, 0, ...
 03850   280   NtContinue  (1244336, 0, ...
 03851   280   NtContinue  (1244336, 0, ...
 03852   280   NtContinue  (1244336, 0, ...
 03853   280   NtContinue  (1244336, 0, ...
 03854   280   NtContinue  (1244336, 0, ...
 03855   280   NtContinue  (1244336, 0, ...
 03856   280   NtContinue  (1244336, 0, ...
 03857   280   NtContinue  (1244336, 0, ...
 03858   280   NtContinue  (1244336, 0, ...
 03859   280   NtContinue  (1244336, 0, ...
 03860   280   NtContinue  (1244336, 0, ...
 03861   280   NtContinue  (1244336, 0, ...
 03862   280   NtContinue  (1244336, 0, ...
 03863   280   NtContinue  (1244336, 0, ...
 03864   280   NtContinue  (1244336, 0, ...
 03865   280   NtContinue  (1244336, 0, ...
 03866   280   NtContinue  (1244336, 0, ...
 03867   280   NtContinue  (1244336, 0, ...
 03868   280   NtContinue  (1244336, 0, ...
 03869   280   NtContinue  (1244336, 0, ...
 03870   280   NtContinue  (1244336, 0, ...
 03871   280   NtContinue  (1244336, 0, ...
 03872   280   NtContinue  (1244336, 0, ...
 03873   280   NtContinue  (1244336, 0, ...
 03874   280   NtContinue  (1244336, 0, ...
 03875   280   NtContinue  (1244336, 0, ...
 03876   280   NtContinue  (1244336, 0, ...
 03877   280   NtContinue  (1244336, 0, ...
 03878   280   NtContinue  (1244336, 0, ...
 03879   280   NtContinue  (1244336, 0, ...
 03880   280   NtContinue  (1244336, 0, ...
 03881   280   NtContinue  (1244336, 0, ...
 03882   280   NtContinue  (1244336, 0, ...
 03883   280   NtContinue  (1244336, 0, ...
 03884   280   NtContinue  (1244336, 0, ...
 03885   280   NtContinue  (1244336, 0, ...
 03886   280   NtContinue  (1244336, 0, ...
 03887   280   NtContinue  (1244336, 0, ...
 03888   280   NtContinue  (1244336, 0, ...
 03889   280   NtContinue  (1244336, 0, ...
 03890   280   NtContinue  (1244336, 0, ...
 03891   280   NtContinue  (1244336, 0, ...
 03892   280   NtContinue  (1244336, 0, ...
 03893   280   NtContinue  (1244336, 0, ...
 03894   280   NtContinue  (1244336, 0, ...
 03895   280   NtContinue  (1244336, 0, ...
 03896   280   NtContinue  (1244336, 0, ...
 03897   280   NtContinue  (1244336, 0, ...
 03898   280   NtContinue  (1244336, 0, ...
 03899   280   NtContinue  (1244336, 0, ...
 03900   280   NtContinue  (1244336, 0, ...
 03901   280   NtContinue  (1244336, 0, ...
 03902   280   NtContinue  (1244336, 0, ...
 03903   280   NtContinue  (1244336, 0, ...
 03904   280   NtContinue  (1244336, 0, ...
 03905   280   NtContinue  (1244336, 0, ...
 03906   280   NtContinue  (1244336, 0, ...
 03907   280   NtContinue  (1244336, 0, ...
 03908   280   NtContinue  (1244336, 0, ...
 03909   280   NtContinue  (1244336, 0, ...
 03910   280   NtContinue  (1244336, 0, ...
 03911   280   NtContinue  (1244336, 0, ...
 03912   280   NtContinue  (1244336, 0, ...
 03913   280   NtContinue  (1244336, 0, ...
 03914   280   NtContinue  (1244336, 0, ...
 03915   280   NtContinue  (1244336, 0, ...
 03916   280   NtContinue  (1244336, 0, ...
 03917   280   NtContinue  (1244336, 0, ...
 03918   280   NtContinue  (1244336, 0, ...
 03919   280   NtContinue  (1244336, 0, ...
 03920   280   NtContinue  (1244336, 0, ...
 03921   280   NtContinue  (1244336, 0, ...
 03922   280   NtContinue  (1244336, 0, ...
 03923   280   NtContinue  (1244336, 0, ...
 03924   280   NtContinue  (1244336, 0, ...
 03925   280   NtContinue  (1244336, 0, ...
 03926   280   NtContinue  (1244336, 0, ...
 03927   280   NtContinue  (1244336, 0, ...
 03928   280   NtContinue  (1244336, 0, ...
 03929   280   NtContinue  (1244336, 0, ...
 03930   280   NtContinue  (1244336, 0, ...
 03931   280   NtContinue  (1244336, 0, ...
 03932   280   NtContinue  (1244336, 0, ...
 03933   280   NtContinue  (1244336, 0, ...
 03934   280   NtContinue  (1244336, 0, ...
 03935   280   NtContinue  (1244336, 0, ...
 03936   280   NtContinue  (1244336, 0, ...
 03937   280   NtContinue  (1244336, 0, ...
 03938   280   NtContinue  (1244336, 0, ...
 03939   280   NtContinue  (1244336, 0, ...
 03940   280   NtContinue  (1244336, 0, ...
 03941   280   NtContinue  (1244336, 0, ...
 03942   280   NtContinue  (1244336, 0, ...
 03943   280   NtContinue  (1244336, 0, ...
 03944   280   NtContinue  (1244336, 0, ...
 03945   280   NtContinue  (1244336, 0, ...
 03946   280   NtContinue  (1244336, 0, ...
 03947   280   NtContinue  (1244336, 0, ...
 03948   280   NtContinue  (1244336, 0, ...
 03949   280   NtContinue  (1244336, 0, ...
 03950   280   NtContinue  (1244336, 0, ...
 03951   280   NtContinue  (1244336, 0, ...
 03952   280   NtContinue  (1244336, 0, ...
 03953   280   NtContinue  (1244336, 0, ...
 03954   280   NtContinue  (1244336, 0, ...
 03955   280   NtContinue  (1244336, 0, ...
 03956   280   NtContinue  (1244336, 0, ...
 03957   280   NtContinue  (1244336, 0, ...
 03958   280   NtContinue  (1244336, 0, ...
 03959   280   NtContinue  (1244336, 0, ...
 03960   280   NtContinue  (1244336, 0, ...
 03961   280   NtContinue  (1244336, 0, ...
 03962   280   NtContinue  (1244336, 0, ...
 03963   280   NtContinue  (1244336, 0, ...
 03964   280   NtContinue  (1244336, 0, ...
 03965   280   NtContinue  (1244336, 0, ...
 03966   280   NtContinue  (1244336, 0, ...
 03967   280   NtContinue  (1244336, 0, ...
 03968   280   NtContinue  (1244336, 0, ...
 03969   280   NtContinue  (1244336, 0, ...
 03970   280   NtContinue  (1244336, 0, ...
 03971   280   NtContinue  (1244336, 0, ...
 03972   280   NtContinue  (1244336, 0, ...
 03973   280   NtContinue  (1244336, 0, ...
 03974   280   NtContinue  (1244336, 0, ...
 03975   280   NtContinue  (1244336, 0, ...
 03976   280   NtContinue  (1244336, 0, ...
 03977   280   NtContinue  (1244336, 0, ...
 03978   280   NtContinue  (1244336, 0, ...
 03979   280   NtContinue  (1244336, 0, ...
 03980   280   NtContinue  (1244336, 0, ...
 03981   280   NtContinue  (1244336, 0, ...
 03982   280   NtContinue  (1244336, 0, ...
 03983   280   NtContinue  (1244336, 0, ...
 03984   280   NtContinue  (1244336, 0, ...
 03985   280   NtContinue  (1244336, 0, ...
 03986   280   NtContinue  (1244336, 0, ...
 03987   280   NtContinue  (1244336, 0, ...
 03988   280   NtContinue  (1244336, 0, ...
 03989   280   NtContinue  (1244336, 0, ...
 03990   280   NtContinue  (1244336, 0, ...
 03991   280   NtContinue  (1244336, 0, ...
 03992   280   NtContinue  (1244336, 0, ...
 03993   280   NtContinue  (1244336, 0, ...
 03994   280   NtContinue  (1244336, 0, ...
 03995   280   NtContinue  (1244336, 0, ...
 03996   280   NtContinue  (1244336, 0, ...
 03997   280   NtContinue  (1244336, 0, ...
 03998   280   NtContinue  (1244336, 0, ...
 03999   280   NtContinue  (1244336, 0, ...
 04000   280   NtContinue  (1244336, 0, ...
 04001   280   NtContinue  (1244336, 0, ...
 04002   280   NtContinue  (1244336, 0, ...
 04003   280   NtContinue  (1244336, 0, ...
 04004   280   NtContinue  (1244336, 0, ...
 04005   280   NtContinue  (1244336, 0, ...
 04006   280   NtContinue  (1244336, 0, ...
 04007   280   NtContinue  (1244336, 0, ...
 04008   280   NtContinue  (1244336, 0, ...
 04009   280   NtContinue  (1244336, 0, ...
 04010   280   NtContinue  (1244336, 0, ...
 04011   280   NtContinue  (1244336, 0, ...
 04012   280   NtContinue  (1244336, 0, ...
 04013   280   NtContinue  (1244336, 0, ...
 04014   280   NtContinue  (1244336, 0, ...
 04015   280   NtContinue  (1244336, 0, ...
 04016   280   NtContinue  (1244336, 0, ...
 04017   280   NtContinue  (1244336, 0, ...
 04018   280   NtContinue  (1244336, 0, ...
 04019   280   NtContinue  (1244336, 0, ...
 04020   280   NtContinue  (1244336, 0, ...
 04021   280   NtContinue  (1244336, 0, ...
 04022   280   NtContinue  (1244336, 0, ...
 04023   280   NtContinue  (1244336, 0, ...
 04024   280   NtContinue  (1244336, 0, ...
 04025   280   NtContinue  (1244336, 0, ...
 04026   280   NtContinue  (1244336, 0, ...
 04027   280   NtContinue  (1244336, 0, ...
 04028   280   NtContinue  (1244336, 0, ...
 04029   280   NtContinue  (1244336, 0, ...
 04030   280   NtContinue  (1244336, 0, ...
 04031   280   NtContinue  (1244336, 0, ...
 04032   280   NtContinue  (1244336, 0, ...
 04033   280   NtContinue  (1244336, 0, ...
 04034   280   NtContinue  (1244336, 0, ...
 04035   280   NtContinue  (1244336, 0, ...
 04036   280   NtContinue  (1244336, 0, ...
 04037   280   NtContinue  (1244336, 0, ...
 04038   280   NtContinue  (1244336, 0, ...
 04039   280   NtContinue  (1244336, 0, ...
 04040   280   NtContinue  (1244336, 0, ...
 04041   280   NtContinue  (1244336, 0, ...
 04042   280   NtContinue  (1244336, 0, ...
 04043   280   NtContinue  (1244336, 0, ...
 04044   280   NtContinue  (1244336, 0, ...
 04045   280   NtContinue  (1244336, 0, ...
 04046   280   NtContinue  (1244336, 0, ...
 04047   280   NtContinue  (1244336, 0, ...
 04048   280   NtContinue  (1244336, 0, ...
 04049   280   NtContinue  (1244336, 0, ...
 04050   280   NtContinue  (1244336, 0, ...
 04051   280   NtContinue  (1244336, 0, ...
 04052   280   NtContinue  (1244336, 0, ...
 04053   280   NtContinue  (1244336, 0, ...
 04054   280   NtContinue  (1244336, 0, ...
 04055   280   NtContinue  (1244336, 0, ...
 04056   280   NtContinue  (1244336, 0, ...
 04057   280   NtContinue  (1244336, 0, ...
 04058   280   NtContinue  (1244336, 0, ...
 04059   280   NtContinue  (1244336, 0, ...
 04060   280   NtContinue  (1244336, 0, ...
 04061   280   NtContinue  (1244336, 0, ...
 04062   280   NtContinue  (1244336, 0, ...
 04063   280   NtContinue  (1244336, 0, ...
 04064   280   NtContinue  (1244336, 0, ...
 04065   280   NtContinue  (1244336, 0, ...
 04066   280   NtContinue  (1244336, 0, ...
 04067   280   NtContinue  (1244336, 0, ...
 04068   280   NtContinue  (1244336, 0, ...
 04069   280   NtContinue  (1244336, 0, ...
 04070   280   NtContinue  (1244336, 0, ...
 04071   280   NtContinue  (1244336, 0, ...
 04072   280   NtContinue  (1244336, 0, ...
 04073   280   NtContinue  (1244336, 0, ...
 04074   280   NtContinue  (1244336, 0, ...
 04075   280   NtContinue  (1244336, 0, ...
 04076   280   NtContinue  (1244336, 0, ...
 04077   280   NtContinue  (1244336, 0, ...
 04078   280   NtContinue  (1244336, 0, ...
 04079   280   NtContinue  (1244336, 0, ...
 04080   280   NtContinue  (1244336, 0, ...
 04081   280   NtContinue  (1244336, 0, ...
 04082   280   NtContinue  (1244336, 0, ...
 04083   280   NtContinue  (1244336, 0, ...
 04084   280   NtContinue  (1244336, 0, ...
 04085   280   NtContinue  (1244336, 0, ...
 04086   280   NtContinue  (1244336, 0, ...
 04087   280   NtContinue  (1244336, 0, ...
 04088   280   NtContinue  (1244336, 0, ...
 04089   280   NtContinue  (1244336, 0, ...
 04090   280   NtContinue  (1244336, 0, ...
 04091   280   NtContinue  (1244336, 0, ...
 04092   280   NtContinue  (1244336, 0, ...
 04093   280   NtContinue  (1244336, 0, ...
 04094   280   NtContinue  (1244336, 0, ...
 04095   280   NtContinue  (1244336, 0, ...
 04096   280   NtContinue  (1244336, 0, ...
 04097   280   NtContinue  (1244336, 0, ...
 04098   280   NtContinue  (1244336, 0, ...
 04099   280   NtContinue  (1244336, 0, ...
 04100   280   NtContinue  (1244336, 0, ...
 04101   280   NtContinue  (1244336, 0, ...
 04102   280   NtContinue  (1244336, 0, ...
 04103   280   NtContinue  (1244336, 0, ...
 04104   280   NtContinue  (1244336, 0, ...
 04105   280   NtContinue  (1244336, 0, ...
 04106   280   NtContinue  (1244336, 0, ...
 04107   280   NtContinue  (1244336, 0, ...
 04108   280   NtContinue  (1244336, 0, ...
 04109   280   NtContinue  (1244336, 0, ...
 04110   280   NtContinue  (1244336, 0, ...
 04111   280   NtContinue  (1244336, 0, ...
 04112   280   NtContinue  (1244336, 0, ...
 04113   280   NtContinue  (1244336, 0, ...
 04114   280   NtContinue  (1244336, 0, ...
 04115   280   NtContinue  (1244336, 0, ...
 04116   280   NtContinue  (1244336, 0, ...
 04117   280   NtContinue  (1244336, 0, ...
 04118   280   NtContinue  (1244336, 0, ...
 04119   280   NtContinue  (1244336, 0, ...
 04120   280   NtContinue  (1244336, 0, ...
 04121   280   NtContinue  (1244336, 0, ...
 04122   280   NtContinue  (1244336, 0, ...
 04123   280   NtContinue  (1244336, 0, ...
 04124   280   NtContinue  (1244336, 0, ...
 04125   280   NtContinue  (1244336, 0, ...
 04126   280   NtContinue  (1244336, 0, ...
 04127   280   NtContinue  (1244336, 0, ...
 04128   280   NtContinue  (1244336, 0, ...
 04129   280   NtContinue  (1244336, 0, ...
 04130   280   NtContinue  (1244336, 0, ...
 04131   280   NtContinue  (1244336, 0, ...
 04132   280   NtContinue  (1244336, 0, ...
 04133   280   NtContinue  (1244336, 0, ...
 04134   280   NtContinue  (1244336, 0, ...
 04135   280   NtContinue  (1244336, 0, ...
 04136   280   NtContinue  (1244336, 0, ...
 04137   280   NtContinue  (1244336, 0, ...
 04138   280   NtContinue  (1244336, 0, ...
 04139   280   NtContinue  (1244336, 0, ...
 04140   280   NtContinue  (1244336, 0, ...
 04141   280   NtContinue  (1244336, 0, ...
 04142   280   NtContinue  (1244336, 0, ...
 04143   280   NtContinue  (1244336, 0, ...
 04144   280   NtContinue  (1244336, 0, ...
 04145   280   NtContinue  (1244336, 0, ...
 04146   280   NtContinue  (1244336, 0, ...
 04147   280   NtContinue  (1244336, 0, ...
 04148   280   NtContinue  (1244336, 0, ...
 04149   280   NtContinue  (1244336, 0, ...
 04150   280   NtContinue  (1244336, 0, ...
 04151   280   NtContinue  (1244336, 0, ...
 04152   280   NtContinue  (1244336, 0, ...
 04153   280   NtContinue  (1244336, 0, ...
 04154   280   NtContinue  (1244336, 0, ...
 04155   280   NtContinue  (1244336, 0, ...
 04156   280   NtContinue  (1244336, 0, ...
 04157   280   NtContinue  (1244336, 0, ...
 04158   280   NtContinue  (1244336, 0, ...
 04159   280   NtContinue  (1244336, 0, ...
 04160   280   NtContinue  (1244336, 0, ...
 04161   280   NtContinue  (1244336, 0, ...
 04162   280   NtContinue  (1244336, 0, ...
 04163   280   NtContinue  (1244336, 0, ...
 04164   280   NtContinue  (1244336, 0, ...
 04165   280   NtContinue  (1244336, 0, ...
 04166   280   NtContinue  (1244336, 0, ...
 04167   280   NtContinue  (1244336, 0, ...
 04168   280   NtContinue  (1244336, 0, ...
 04169   280   NtContinue  (1244336, 0, ...
 04170   280   NtContinue  (1244336, 0, ...
 04171   280   NtContinue  (1244336, 0, ...
 04172   280   NtContinue  (1244336, 0, ...
 04173   280   NtContinue  (1244336, 0, ...
 04174   280   NtContinue  (1244336, 0, ...
 04175   280   NtContinue  (1244336, 0, ...
 04176   280   NtContinue  (1244336, 0, ...
 04177   280   NtContinue  (1244336, 0, ...
 04178   280   NtContinue  (1244336, 0, ...
 04179   280   NtContinue  (1244336, 0, ...
 04180   280   NtContinue  (1244336, 0, ...
 04181   280   NtContinue  (1244336, 0, ...
 04182   280   NtContinue  (1244336, 0, ...
 04183   280   NtContinue  (1244336, 0, ...
 04184   280   NtContinue  (1244336, 0, ...
 04185   280   NtContinue  (1244336, 0, ...
 04186   280   NtContinue  (1244336, 0, ...
 04187   280   NtContinue  (1244336, 0, ...
 04188   280   NtContinue  (1244336, 0, ...
 04189   280   NtContinue  (1244336, 0, ...
 04190   280   NtContinue  (1244336, 0, ...
 04191   280   NtContinue  (1244336, 0, ...
 04192   280   NtContinue  (1244336, 0, ...
 04193   280   NtContinue  (1244336, 0, ...
 04194   280   NtContinue  (1244336, 0, ...
 04195   280   NtContinue  (1244336, 0, ...
 04196   280   NtContinue  (1244336, 0, ...
 04197   280   NtContinue  (1244336, 0, ...
 04198   280   NtContinue  (1244336, 0, ...
 04199   280   NtContinue  (1244336, 0, ...
 04200   280   NtContinue  (1244336, 0, ...
 04201   280   NtContinue  (1244336, 0, ...
 04202   280   NtContinue  (1244336, 0, ...
 04203   280   NtContinue  (1244336, 0, ...
 04204   280   NtContinue  (1244336, 0, ...
 04205   280   NtContinue  (1244336, 0, ...
 04206   280   NtContinue  (1244336, 0, ...
 04207   280   NtContinue  (1244336, 0, ...
 04208   280   NtContinue  (1244336, 0, ...
 04209   280   NtContinue  (1244336, 0, ...
 04210   280   NtContinue  (1244336, 0, ...
 04211   280   NtContinue  (1244336, 0, ...
 04212   280   NtContinue  (1244336, 0, ...
 04213   280   NtContinue  (1244336, 0, ...
 04214   280   NtContinue  (1244336, 0, ...
 04215   280   NtContinue  (1244336, 0, ...
 04216   280   NtContinue  (1244336, 0, ...
 04217   280   NtContinue  (1244336, 0, ...
 04218   280   NtContinue  (1244336, 0, ...
 04219   280   NtContinue  (1244336, 0, ...
 04220   280   NtContinue  (1244336, 0, ...
 04221   280   NtContinue  (1244336, 0, ...
 04222   280   NtContinue  (1244336, 0, ...
 04223   280   NtContinue  (1244336, 0, ...
 04224   280   NtContinue  (1244336, 0, ...
 04225   280   NtContinue  (1244336, 0, ...
 04226   280   NtContinue  (1244336, 0, ...
 04227   280   NtContinue  (1244336, 0, ...
 04228   280   NtContinue  (1244336, 0, ...
 04229   280   NtContinue  (1244336, 0, ...
 04230   280   NtContinue  (1244336, 0, ...
 04231   280   NtContinue  (1244336, 0, ...
 04232   280   NtContinue  (1244336, 0, ...
 04233   280   NtContinue  (1244336, 0, ...
 04234   280   NtContinue  (1244336, 0, ...
 04235   280   NtContinue  (1244336, 0, ...
 04236   280   NtContinue  (1244336, 0, ...
 04237   280   NtContinue  (1244336, 0, ...
 04238   280   NtContinue  (1244336, 0, ...
 04239   280   NtContinue  (1244336, 0, ...
 04240   280   NtContinue  (1244336, 0, ...
 04241   280   NtContinue  (1244336, 0, ...
 04242   280   NtContinue  (1244336, 0, ...
 04243   280   NtContinue  (1244336, 0, ...
 04244   280   NtContinue  (1244336, 0, ...
 04245   280   NtContinue  (1244336, 0, ...
 04246   280   NtContinue  (1244336, 0, ...
 04247   280   NtContinue  (1244336, 0, ...
 04248   280   NtContinue  (1244336, 0, ...
 04249   280   NtContinue  (1244336, 0, ...
 04250   280   NtContinue  (1244336, 0, ...
 04251   280   NtContinue  (1244336, 0, ...
 04252   280   NtContinue  (1244336, 0, ...
 04253   280   NtContinue  (1244336, 0, ...
 04254   280   NtContinue  (1244336, 0, ...
 04255   280   NtContinue  (1244336, 0, ...
 04256   280   NtContinue  (1244336, 0, ...
 04257   280   NtContinue  (1244336, 0, ...
 04258   280   NtContinue  (1244336, 0, ...
 04259   280   NtContinue  (1244336, 0, ...
 04260   280   NtContinue  (1244336, 0, ...
 04261   280   NtContinue  (1244336, 0, ...
 04262   280   NtContinue  (1244336, 0, ...
 04263   280   NtContinue  (1244336, 0, ...
 04264   280   NtContinue  (1244336, 0, ...
 04265   280   NtContinue  (1244336, 0, ...
 04266   280   NtContinue  (1244336, 0, ...
 04267   280   NtContinue  (1244336, 0, ...
 04268   280   NtContinue  (1244336, 0, ...
 04269   280   NtContinue  (1244336, 0, ...
 04270   280   NtContinue  (1244336, 0, ...
 04271   280   NtContinue  (1244336, 0, ...
 04272   280   NtContinue  (1244336, 0, ...
 04273   280   NtContinue  (1244336, 0, ...
 04274   280   NtContinue  (1244336, 0, ...
 04275   280   NtContinue  (1244336, 0, ...
 04276   280   NtContinue  (1244336, 0, ...
 04277   280   NtContinue  (1244336, 0, ...
 04278   280   NtContinue  (1244336, 0, ...
 04279   280   NtContinue  (1244336, 0, ...
 04280   280   NtContinue  (1244336, 0, ...
 04281   280   NtContinue  (1244336, 0, ...
 04282   280   NtContinue  (1244336, 0, ...
 04283   280   NtContinue  (1244336, 0, ...
 04284   280   NtContinue  (1244336, 0, ...
 04285   280   NtContinue  (1244336, 0, ...
 04286   280   NtContinue  (1244336, 0, ...
 04287   280   NtContinue  (1244336, 0, ...
 04288   280   NtContinue  (1244336, 0, ...
 04289   280   NtContinue  (1244336, 0, ...
 04290   280   NtContinue  (1244336, 0, ...
 04291   280   NtContinue  (1244336, 0, ...
 04292   280   NtContinue  (1244336, 0, ...
 04293   280   NtContinue  (1244336, 0, ...
 04294   280   NtContinue  (1244336, 0, ...
 04295   280   NtContinue  (1244336, 0, ...
 04296   280   NtContinue  (1244336, 0, ...
 04297   280   NtContinue  (1244336, 0, ...
 04298   280   NtContinue  (1244336, 0, ...
 04299   280   NtContinue  (1244336, 0, ...
 04300   280   NtContinue  (1244336, 0, ...
 04301   280   NtContinue  (1244336, 0, ...
 04302   280   NtContinue  (1244336, 0, ...
 04303   280   NtContinue  (1244336, 0, ...
 04304   280   NtContinue  (1244336, 0, ...
 04305   280   NtContinue  (1244336, 0, ...
 04306   280   NtContinue  (1244336, 0, ...
 04307   280   NtContinue  (1244336, 0, ...
 04308   280   NtContinue  (1244336, 0, ...
 04309   280   NtContinue  (1244336, 0, ...
 04310   280   NtContinue  (1244336, 0, ...
 04311   280   NtContinue  (1244336, 0, ...
 04312   280   NtContinue  (1244336, 0, ...
 04313   280   NtContinue  (1244336, 0, ...
 04314   280   NtContinue  (1244336, 0, ...
 04315   280   NtContinue  (1244336, 0, ...
 04316   280   NtContinue  (1244336, 0, ...
 04317   280   NtContinue  (1244336, 0, ...
 04318   280   NtContinue  (1244336, 0, ...
 04319   280   NtContinue  (1244336, 0, ...
 04320   280   NtContinue  (1244336, 0, ...
 04321   280   NtContinue  (1244336, 0, ...
 04322   280   NtContinue  (1244336, 0, ...
 04323   280   NtContinue  (1244336, 0, ...
 04324   280   NtContinue  (1244336, 0, ...
 04325   280   NtContinue  (1244336, 0, ...
 04326   280   NtContinue  (1244336, 0, ...
 04327   280   NtContinue  (1244336, 0, ...
 04328   280   NtContinue  (1244336, 0, ...
 04329   280   NtContinue  (1244336, 0, ...
 04330   280   NtContinue  (1244336, 0, ...
 04331   280   NtContinue  (1244336, 0, ...
 04332   280   NtContinue  (1244336, 0, ...
 04333   280   NtContinue  (1244336, 0, ...
 04334   280   NtContinue  (1244336, 0, ...
 04335   280   NtContinue  (1244336, 0, ...
 04336   280   NtContinue  (1244336, 0, ...
 04337   280   NtContinue  (1244336, 0, ...
 04338   280   NtContinue  (1244336, 0, ...
 04339   280   NtContinue  (1244336, 0, ...
 04340   280   NtContinue  (1244336, 0, ...
 04341   280   NtContinue  (1244336, 0, ...
 04342   280   NtContinue  (1244336, 0, ...
 04343   280   NtContinue  (1244336, 0, ...
 04344   280   NtContinue  (1244336, 0, ...
 04345   280   NtContinue  (1244336, 0, ...
 04346   280   NtContinue  (1244336, 0, ...
 04347   280   NtContinue  (1244336, 0, ...
 04348   280   NtContinue  (1244336, 0, ...
 04349   280   NtContinue  (1244336, 0, ...
 04350   280   NtContinue  (1244336, 0, ...
 04351   280   NtContinue  (1244336, 0, ...
 04352   280   NtContinue  (1244336, 0, ...
 04353   280   NtContinue  (1244336, 0, ...
 04354   280   NtContinue  (1244336, 0, ...
 04355   280   NtContinue  (1244336, 0, ...
 04356   280   NtContinue  (1244336, 0, ...
 04357   280   NtContinue  (1244336, 0, ...
 04358   280   NtContinue  (1244336, 0, ...
 04359   280   NtContinue  (1244336, 0, ...
 04360   280   NtContinue  (1244336, 0, ...
 04361   280   NtContinue  (1244336, 0, ...
 04362   280   NtContinue  (1244336, 0, ...
 04363   280   NtContinue  (1244336, 0, ...
 04364   280   NtContinue  (1244336, 0, ...
 04365   280   NtContinue  (1244336, 0, ...
 04366   280   NtContinue  (1244336, 0, ...
 04367   280   NtContinue  (1244336, 0, ...
 04368   280   NtContinue  (1244336, 0, ...
 04369   280   NtContinue  (1244336, 0, ...
 04370   280   NtContinue  (1244336, 0, ...
 04371   280   NtContinue  (1244336, 0, ...
 04372   280   NtContinue  (1244336, 0, ...
 04373   280   NtContinue  (1244336, 0, ...
 04374   280   NtContinue  (1244336, 0, ...
 04375   280   NtContinue  (1244336, 0, ...
 04376   280   NtContinue  (1244336, 0, ...
 04377   280   NtContinue  (1244336, 0, ...
 04378   280   NtContinue  (1244336, 0, ...
 04379   280   NtContinue  (1244336, 0, ...
 04380   280   NtContinue  (1244336, 0, ...
 04381   280   NtContinue  (1244336, 0, ...
 04382   280   NtContinue  (1244336, 0, ...
 04383   280   NtContinue  (1244336, 0, ...
 04384   280   NtContinue  (1244336, 0, ...
 04385   280   NtContinue  (1244336, 0, ...
 04386   280   NtContinue  (1244336, 0, ...
 04387   280   NtContinue  (1244336, 0, ...
 04388   280   NtContinue  (1244336, 0, ...
 04389   280   NtContinue  (1244336, 0, ...
 04390   280   NtContinue  (1244336, 0, ...
 04391   280   NtContinue  (1244336, 0, ...
 04392   280   NtContinue  (1244336, 0, ...
 04393   280   NtContinue  (1244336, 0, ...
 04394   280   NtContinue  (1244336, 0, ...
 04395   280   NtContinue  (1244336, 0, ...
 04396   280   NtContinue  (1244336, 0, ...
 04397   280   NtContinue  (1244336, 0, ...
 04398   280   NtContinue  (1244336, 0, ...
 04399   280   NtContinue  (1244336, 0, ...
 04400   280   NtContinue  (1244336, 0, ...
 04401   280   NtContinue  (1244336, 0, ...
 04402   280   NtContinue  (1244336, 0, ...
 04403   280   NtContinue  (1244336, 0, ...
 04404   280   NtContinue  (1244336, 0, ...
 04405   280   NtContinue  (1244336, 0, ...
 04406   280   NtContinue  (1244336, 0, ...
 04407   280   NtContinue  (1244336, 0, ...
 04408   280   NtContinue  (1244336, 0, ...
 04409   280   NtContinue  (1244336, 0, ...
 04410   280   NtContinue  (1244336, 0, ...
 04411   280   NtContinue  (1244336, 0, ...
 04412   280   NtContinue  (1244336, 0, ...
 04413   280   NtContinue  (1244336, 0, ...
 04414   280   NtContinue  (1244336, 0, ...
 04415   280   NtContinue  (1244336, 0, ...
 04416   280   NtContinue  (1244336, 0, ...
 04417   280   NtContinue  (1244336, 0, ...
 04418   280   NtContinue  (1244336, 0, ...
 04419   280   NtContinue  (1244336, 0, ...
 04420   280   NtContinue  (1244336, 0, ...
 04421   280   NtContinue  (1244336, 0, ...
 04422   280   NtContinue  (1244336, 0, ...
 04423   280   NtContinue  (1244336, 0, ...
 04424   280   NtContinue  (1244336, 0, ...
 04425   280   NtContinue  (1244336, 0, ...
 04426   280   NtContinue  (1244336, 0, ...
 04427   280   NtContinue  (1244336, 0, ...
 04428   280   NtContinue  (1244336, 0, ...
 04429   280   NtContinue  (1244336, 0, ...
 04430   280   NtContinue  (1244336, 0, ...
 04431   280   NtContinue  (1244336, 0, ...
 04432   280   NtContinue  (1244336, 0, ...
 04433   280   NtContinue  (1244336, 0, ...
 04434   280   NtContinue  (1244336, 0, ...
 04435   280   NtContinue  (1244336, 0, ...
 04436   280   NtContinue  (1244336, 0, ...
 04437   280   NtContinue  (1244336, 0, ...
 04438   280   NtContinue  (1244336, 0, ...
 04439   280   NtContinue  (1244336, 0, ...
 04440   280   NtContinue  (1244336, 0, ...
 04441   280   NtContinue  (1244336, 0, ...
 04442   280   NtContinue  (1244336, 0, ...
 04443   280   NtContinue  (1244336, 0, ...
 04444   280   NtContinue  (1244336, 0, ...
 04445   280   NtContinue  (1244336, 0, ...
 04446   280   NtContinue  (1244336, 0, ...
 04447   280   NtContinue  (1244336, 0, ...
 04448   280   NtContinue  (1244336, 0, ...
 04449   280   NtContinue  (1244336, 0, ...
 04450   280   NtContinue  (1244336, 0, ...
 04451   280   NtContinue  (1244336, 0, ...
 04452   280   NtContinue  (1244336, 0, ...
 04453   280   NtContinue  (1244336, 0, ...
 04454   280   NtContinue  (1244336, 0, ...
 04455   280   NtContinue  (1244336, 0, ...
 04456   280   NtContinue  (1244336, 0, ...
 04457   280   NtContinue  (1244336, 0, ...
 04458   280   NtContinue  (1244336, 0, ...
 04459   280   NtContinue  (1244336, 0, ...
 04460   280   NtContinue  (1244336, 0, ...
 04461   280   NtContinue  (1244336, 0, ...
 04462   280   NtContinue  (1244336, 0, ...
 04463   280   NtContinue  (1244336, 0, ...
 04464   280   NtContinue  (1244336, 0, ...
 04465   280   NtContinue  (1244336, 0, ...
 04466   280   NtContinue  (1244336, 0, ...
 04467   280   NtContinue  (1244336, 0, ...
 04468   280   NtContinue  (1244336, 0, ...
 04469   280   NtContinue  (1244336, 0, ...
 04470   280   NtContinue  (1244336, 0, ...
 04471   280   NtContinue  (1244336, 0, ...
 04472   280   NtContinue  (1244336, 0, ...
 04473   280   NtContinue  (1244336, 0, ...
 04474   280   NtContinue  (1244336, 0, ...
 04475   280   NtContinue  (1244336, 0, ...
 04476   280   NtContinue  (1244336, 0, ...
 04477   280   NtContinue  (1244336, 0, ...
 04478   280   NtContinue  (1244336, 0, ...
 04479   280   NtContinue  (1244336, 0, ...
 04480   280   NtContinue  (1244336, 0, ...
 04481   280   NtContinue  (1244336, 0, ...
 04482   280   NtContinue  (1244336, 0, ...
 04483   280   NtContinue  (1244336, 0, ...
 04484   280   NtContinue  (1244336, 0, ...
 04485   280   NtContinue  (1244336, 0, ...
 04486   280   NtContinue  (1244336, 0, ...
 04487   280   NtContinue  (1244336, 0, ...
 04488   280   NtContinue  (1244336, 0, ...
 04489   280   NtContinue  (1244336, 0, ...
 04490   280   NtContinue  (1244336, 0, ...
 04491   280   NtContinue  (1244336, 0, ...
 04492   280   NtContinue  (1244336, 0, ...
 04493   280   NtContinue  (1244336, 0, ...
 04494   280   NtContinue  (1244336, 0, ...
 04495   280   NtContinue  (1244336, 0, ...
 04496   280   NtContinue  (1244336, 0, ...
 04497   280   NtContinue  (1244336, 0, ...
 04498   280   NtContinue  (1244336, 0, ...
 04499   280   NtContinue  (1244336, 0, ...
 04500   280   NtContinue  (1244336, 0, ...
 04501   280   NtContinue  (1244336, 0, ...
 04502   280   NtContinue  (1244336, 0, ...
 04503   280   NtContinue  (1244336, 0, ...
 04504   280   NtContinue  (1244336, 0, ...
 04505   280   NtContinue  (1244336, 0, ...
 04506   280   NtContinue  (1244336, 0, ...
 04507   280   NtContinue  (1244336, 0, ...
 04508   280   NtContinue  (1244336, 0, ...
 04509   280   NtContinue  (1244336, 0, ...
 04510   280   NtContinue  (1244336, 0, ...
 04511   280   NtContinue  (1244336, 0, ...
 04512   280   NtContinue  (1244336, 0, ...
 04513   280   NtContinue  (1244336, 0, ...
 04514   280   NtContinue  (1244336, 0, ...
 04515   280   NtContinue  (1244336, 0, ...
 04516   280   NtContinue  (1244336, 0, ...
 04517   280   NtContinue  (1244336, 0, ...
 04518   280   NtContinue  (1244336, 0, ...
 04519   280   NtContinue  (1244336, 0, ...
 04520   280   NtContinue  (1244336, 0, ...
 04521   280   NtContinue  (1244336, 0, ...
 04522   280   NtContinue  (1244336, 0, ...
 04523   280   NtContinue  (1244336, 0, ...
 04524   280   NtContinue  (1244336, 0, ...
 04525   280   NtContinue  (1244336, 0, ...
 04526   280   NtContinue  (1244336, 0, ...
 04527   280   NtContinue  (1244336, 0, ...
 04528   280   NtContinue  (1244336, 0, ...
 04529   280   NtContinue  (1244336, 0, ...
 04530   280   NtContinue  (1244336, 0, ...
 04531   280   NtContinue  (1244336, 0, ...
 04532   280   NtContinue  (1244336, 0, ...
 04533   280   NtContinue  (1244336, 0, ...
 04534   280   NtContinue  (1244336, 0, ...
 04535   280   NtContinue  (1244336, 0, ...
 04536   280   NtContinue  (1244336, 0, ...
 04537   280   NtContinue  (1244336, 0, ...
 04538   280   NtContinue  (1244336, 0, ...
 04539   280   NtContinue  (1244336, 0, ...
 04540   280   NtContinue  (1244336, 0, ...
 04541   280   NtContinue  (1244336, 0, ...
 04542   280   NtContinue  (1244336, 0, ...
 04543   280   NtContinue  (1244336, 0, ...
 04544   280   NtContinue  (1244336, 0, ...
 04545   280   NtContinue  (1244336, 0, ...
 04546   280   NtContinue  (1244336, 0, ...
 04547   280   NtContinue  (1244336, 0, ...
 04548   280   NtContinue  (1244336, 0, ...
 04549   280   NtContinue  (1244336, 0, ...
 04550   280   NtContinue  (1244336, 0, ...
 04551   280   NtContinue  (1244336, 0, ...
 04552   280   NtContinue  (1244336, 0, ...
 04553   280   NtContinue  (1244336, 0, ...
 04554   280   NtContinue  (1244336, 0, ...
 04555   280   NtContinue  (1244336, 0, ...
 04556   280   NtContinue  (1244336, 0, ...
 04557   280   NtContinue  (1244336, 0, ...
 04558   280   NtContinue  (1244336, 0, ...
 04559   280   NtContinue  (1244336, 0, ...
 04560   280   NtContinue  (1244336, 0, ...
 04561   280   NtContinue  (1244336, 0, ...
 04562   280   NtContinue  (1244336, 0, ...
 04563   280   NtContinue  (1244336, 0, ...
 04564   280   NtContinue  (1244336, 0, ...
 04565   280   NtContinue  (1244336, 0, ...
 04566   280   NtContinue  (1244336, 0, ...
 04567   280   NtContinue  (1244336, 0, ...
 04568   280   NtContinue  (1244336, 0, ...
 04569   280   NtContinue  (1244336, 0, ...
 04570   280   NtContinue  (1244336, 0, ...
 04571   280   NtContinue  (1244336, 0, ...
 04572   280   NtContinue  (1244336, 0, ...
 04573   280   NtContinue  (1244336, 0, ...
 04574   280   NtContinue  (1244336, 0, ...
 04575   280   NtContinue  (1244336, 0, ...
 04576   280   NtContinue  (1244336, 0, ...
 04577   280   NtContinue  (1244336, 0, ...
 04578   280   NtContinue  (1244336, 0, ...
 04579   280   NtContinue  (1244336, 0, ...
 04580   280   NtContinue  (1244336, 0, ...
 04581   280   NtContinue  (1244336, 0, ...
 04582   280   NtContinue  (1244336, 0, ...
 04583   280   NtContinue  (1244336, 0, ...
 04584   280   NtContinue  (1244336, 0, ...
 04585   280   NtContinue  (1244336, 0, ...
 04586   280   NtContinue  (1244336, 0, ...
 04587   280   NtContinue  (1244336, 0, ...
 04588   280   NtContinue  (1244336, 0, ...
 04589   280   NtContinue  (1244336, 0, ...
 04590   280   NtContinue  (1244336, 0, ...
 04591   280   NtContinue  (1244336, 0, ...
 04592   280   NtContinue  (1244336, 0, ...
 04593   280   NtContinue  (1244336, 0, ...
 04594   280   NtContinue  (1244336, 0, ...
 04595   280   NtContinue  (1244336, 0, ...
 04596   280   NtContinue  (1244336, 0, ...
 04597   280   NtContinue  (1244336, 0, ...
 04598   280   NtContinue  (1244336, 0, ...
 04599   280   NtContinue  (1244336, 0, ...
 04600   280   NtContinue  (1244336, 0, ...
 04601   280   NtContinue  (1244336, 0, ...
 04602   280   NtContinue  (1244336, 0, ...
 04603   280   NtContinue  (1244336, 0, ...
 04604   280   NtContinue  (1244336, 0, ...
 04605   280   NtContinue  (1244336, 0, ...
 04606   280   NtContinue  (1244336, 0, ...
 04607   280   NtContinue  (1244336, 0, ...
 04608   280   NtContinue  (1244336, 0, ...
 04609   280   NtContinue  (1244336, 0, ...
 04610   280   NtContinue  (1244336, 0, ...
 04611   280   NtContinue  (1244336, 0, ...
 04612   280   NtContinue  (1244336, 0, ...
 04613   280   NtContinue  (1244336, 0, ...
 04614   280   NtContinue  (1244336, 0, ...
 04615   280   NtContinue  (1244336, 0, ...
 04616   280   NtContinue  (1244336, 0, ...
 04617   280   NtContinue  (1244336, 0, ...
 04618   280   NtContinue  (1244336, 0, ...
 04619   280   NtContinue  (1244336, 0, ...
 04620   280   NtContinue  (1244336, 0, ...
 04621   280   NtContinue  (1244336, 0, ...
 04622   280   NtContinue  (1244336, 0, ...
 04623   280   NtContinue  (1244336, 0, ...
 04624   280   NtContinue  (1244336, 0, ...
 04625   280   NtContinue  (1244336, 0, ...
 04626   280   NtContinue  (1244336, 0, ...
 04627   280   NtContinue  (1244336, 0, ...
 04628   280   NtContinue  (1244336, 0, ...
 04629   280   NtContinue  (1244336, 0, ...
 04630   280   NtContinue  (1244336, 0, ...
 04631   280   NtContinue  (1244336, 0, ...
 04632   280   NtContinue  (1244336, 0, ...
 04633   280   NtContinue  (1244336, 0, ...
 04634   280   NtContinue  (1244336, 0, ...
 04635   280   NtContinue  (1244336, 0, ...
 04636   280   NtContinue  (1244336, 0, ...
 04637   280   NtContinue  (1244336, 0, ...
 04638   280   NtContinue  (1244336, 0, ...
 04639   280   NtContinue  (1244336, 0, ...
 04640   280   NtContinue  (1244336, 0, ...
 04641   280   NtContinue  (1244336, 0, ...
 04642   280   NtContinue  (1244336, 0, ...
 04643   280   NtContinue  (1244336, 0, ...
 04644   280   NtContinue  (1244336, 0, ...
 04645   280   NtContinue  (1244336, 0, ...
 04646   280   NtContinue  (1244336, 0, ...
 04647   280   NtContinue  (1244336, 0, ...
 04648   280   NtContinue  (1244336, 0, ...
 04649   280   NtContinue  (1244336, 0, ...
 04650   280   NtContinue  (1244336, 0, ...
 04651   280   NtContinue  (1244336, 0, ...
 04652   280   NtContinue  (1244336, 0, ...
 04653   280   NtContinue  (1244336, 0, ...
 04654   280   NtContinue  (1244336, 0, ...
 04655   280   NtContinue  (1244336, 0, ...
 04656   280   NtContinue  (1244336, 0, ...
 04657   280   NtContinue  (1244336, 0, ...
 04658   280   NtContinue  (1244336, 0, ...
 04659   280   NtContinue  (1244336, 0, ...
 04660   280   NtContinue  (1244336, 0, ...
 04661   280   NtContinue  (1244336, 0, ...
 04662   280   NtContinue  (1244336, 0, ...
 04663   280   NtContinue  (1244336, 0, ...
 04664   280   NtContinue  (1244336, 0, ...
 04665   280   NtContinue  (1244336, 0, ...
 04666   280   NtContinue  (1244336, 0, ...
 04667   280   NtContinue  (1244336, 0, ...
 04668   280   NtContinue  (1244336, 0, ...
 04669   280   NtContinue  (1244336, 0, ...
 04670   280   NtContinue  (1244336, 0, ...
 04671   280   NtContinue  (1244336, 0, ...
 04672   280   NtContinue  (1244336, 0, ...
 04673   280   NtContinue  (1244336, 0, ...
 04674   280   NtContinue  (1244336, 0, ...
 04675   280   NtContinue  (1244336, 0, ...
 04676   280   NtContinue  (1244336, 0, ...
 04677   280   NtContinue  (1244336, 0, ...
 04678   280   NtContinue  (1244336, 0, ...
 04679   280   NtContinue  (1244336, 0, ...
 04680   280   NtContinue  (1244336, 0, ...
 04681   280   NtContinue  (1244336, 0, ...
 04682   280   NtContinue  (1244336, 0, ...
 04683   280   NtContinue  (1244336, 0, ...
 04684   280   NtContinue  (1244336, 0, ...
 04685   280   NtContinue  (1244336, 0, ...
 04686   280   NtContinue  (1244336, 0, ...
 04687   280   NtContinue  (1244336, 0, ...
 04688   280   NtContinue  (1244336, 0, ...
 04689   280   NtContinue  (1244336, 0, ...
 04690   280   NtContinue  (1244336, 0, ...
 04691   280   NtContinue  (1244336, 0, ...
 04692   280   NtContinue  (1244336, 0, ...
 04693   280   NtContinue  (1244336, 0, ...
 04694   280   NtContinue  (1244336, 0, ...
 04695   280   NtContinue  (1244336, 0, ...
 04696   280   NtContinue  (1244336, 0, ...
 04697   280   NtContinue  (1244336, 0, ...
 04698   280   NtContinue  (1244336, 0, ...
 04699   280   NtContinue  (1244336, 0, ...
 04700   280   NtContinue  (1244336, 0, ...
 04701   280   NtContinue  (1244336, 0, ...
 04702   280   NtContinue  (1244336, 0, ...
 04703   280   NtContinue  (1244336, 0, ...
 04704   280   NtContinue  (1244336, 0, ...
 04705   280   NtContinue  (1244336, 0, ...
 04706   280   NtContinue  (1244336, 0, ...
 04707   280   NtContinue  (1244336, 0, ...
 04708   280   NtContinue  (1244336, 0, ...
 04709   280   NtContinue  (1244336, 0, ...
 04710   280   NtContinue  (1244336, 0, ...
 04711   280   NtContinue  (1244336, 0, ...
 04712   280   NtContinue  (1244336, 0, ...
 04713   280   NtContinue  (1244336, 0, ...
 04714   280   NtContinue  (1244336, 0, ...
 04715   280   NtContinue  (1244336, 0, ...
 04716   280   NtContinue  (1244336, 0, ...
 04717   280   NtContinue  (1244336, 0, ...
 04718   280   NtContinue  (1244336, 0, ...
 04719   280   NtContinue  (1244336, 0, ...
 04720   280   NtContinue  (1244336, 0, ...
 04721   280   NtContinue  (1244336, 0, ...
 04722   280   NtContinue  (1244336, 0, ...
 04723   280   NtContinue  (1244336, 0, ...
 04724   280   NtContinue  (1244336, 0, ...
 04725   280   NtContinue  (1244336, 0, ...
 04726   280   NtContinue  (1244336, 0, ...
 04727   280   NtContinue  (1244336, 0, ...
 04728   280   NtContinue  (1244336, 0, ...
 04729   280   NtContinue  (1244332, 0, ...
 04730   280   NtContinue  (1244332, 0, ...
 04731   280   NtContinue  (1244332, 0, ...
 04732   280   NtContinue  (1244332, 0, ...
 04733   280   NtContinue  (1244332, 0, ...
 04734   280   NtContinue  (1244332, 0, ...
 04735   280   NtContinue  (1244332, 0, ...
 04736   280   NtContinue  (1244332, 0, ...
 04737   280   NtContinue  (1244332, 0, ...
 04738   280   NtContinue  (1244332, 0, ...
 04739   280   NtContinue  (1244332, 0, ...
 04740   280   NtContinue  (1244332, 0, ...
 04741   280   NtContinue  (1244332, 0, ...
 04742   280   NtContinue  (1244332, 0, ...
 04743   280   NtContinue  (1244332, 0, ...
 04744   280   NtContinue  (1244332, 0, ...
 04745   280   NtContinue  (1244332, 0, ...
 04746   280   NtContinue  (1244332, 0, ...
 04747   280   NtContinue  (1244332, 0, ...
 04748   280   NtContinue  (1244332, 0, ...
 04749   280   NtContinue  (1244332, 0, ...
 04750   280   NtContinue  (1244332, 0, ...
 04751   280   NtContinue  (1244332, 0, ...
 04752   280   NtContinue  (1244332, 0, ...
 04753   280   NtContinue  (1244332, 0, ...
 04754   280   NtContinue  (1244332, 0, ...
 04755   280   NtContinue  (1244332, 0, ...
 04756   280   NtContinue  (1244332, 0, ...
 04757   280   NtContinue  (1244332, 0, ...
 04758   280   NtContinue  (1244332, 0, ...
 04759   280   NtContinue  (1244332, 0, ...
 04760   280   NtContinue  (1244332, 0, ...
 04761   280   NtContinue  (1244336, 0, ...
 04762   280   NtContinue  (1244332, 0, ...
 04763   280   NtContinue  (1244332, 0, ...
 04764   280   NtContinue  (1244332, 0, ...
 04765   280   NtContinue  (1244332, 0, ...
 04766   280   NtContinue  (1244336, 0, ...
 04767   280   NtContinue  (1244332, 0, ...
 04768   280   NtContinue  (1244332, 0, ...
 04769   280   NtContinue  (1244332, 0, ...
 04770   280   NtContinue  (1244336, 0, ...
 04771   280   NtContinue  (1244332, 0, ...
 04772   280   NtContinue  (1244332, 0, ...
 04773   280   NtContinue  (1244336, 0, ...
 04774   280   NtContinue  (1244332, 0, ...
 04775   280   NtContinue  (1244332, 0, ...
 04776   280   NtContinue  (1244332, 0, ...
 04777   280   NtContinue  (1244332, 0, ...
 04778   280   NtContinue  (1244332, 0, ...
 04779   280   NtContinue  (1244332, 0, ...
 04780   280   NtContinue  (1244336, 0, ...
 04781   280   NtContinue  (1244332, 0, ...
 04782   280   NtContinue  (1244332, 0, ...
 04783   280   NtContinue  (1244332, 0, ...
 04784   280   NtContinue  (1244332, 0, ...
 04785   280   NtContinue  (1244332, 0, ...
 04786   280   NtContinue  (1244332, 0, ...
 04787   280   NtContinue  (1244336, 0, ...
 04788   280   NtContinue  (1244332, 0, ...
 04789   280   NtContinue  (1244332, 0, ...
 04790   280   NtContinue  (1244332, 0, ...
 04791   280   NtContinue  (1244332, 0, ...
 04792   280   NtContinue  (1244332, 0, ...
 04793   280   NtContinue  (1244332, 0, ...
 04794   280   NtContinue  (1244332, 0, ...
 04795   280   NtContinue  (1244332, 0, ...
 04796   280   NtContinue  (1244332, 0, ...
 04797   280   NtContinue  (1244332, 0, ...
 04798   280   NtContinue  (1244332, 0, ...
 04799   280   NtContinue  (1244332, 0, ...
 04800   280   NtContinue  (1244332, 0, ...
 04801   280   NtContinue  (1244332, 0, ...
 04802   280   NtContinue  (1244332, 0, ...
 04803   280   NtContinue  (1244332, 0, ...
 04804   280   NtContinue  (1244332, 0, ...
 04805   280   NtContinue  (1244332, 0, ...
 04806   280   NtContinue  (1244332, 0, ...
 04807   280   NtContinue  (1244332, 0, ...
 04808   280   NtContinue  (1244332, 0, ...
 04809   280   NtContinue  (1244332, 0, ...
 04810   280   NtContinue  (1244332, 0, ...
 04811   280   NtContinue  (1244332, 0, ...
 04812   280   NtContinue  (1244332, 0, ...
 04813   280   NtContinue  (1244332, 0, ...
 04814   280   NtContinue  (1244332, 0, ...
 04815   280   NtContinue  (1244332, 0, ...
 04816   280   NtContinue  (1244332, 0, ...
 04817   280   NtContinue  (1244332, 0, ...
 04818   280   NtContinue  (1244332, 0, ...
 04819   280   NtContinue  (1244332, 0, ...
 04820   280   NtContinue  (1244332, 0, ...
 04821   280   NtContinue  (1244332, 0, ...
 04822   280   NtContinue  (1244332, 0, ...
 04823   280   NtContinue  (1244332, 0, ...
 04824   280   NtContinue  (1244332, 0, ...
 04825   280   NtContinue  (1244332, 0, ...
 04826   280   NtContinue  (1244332, 0, ...
 04827   280   NtContinue  (1244332, 0, ...
 04828   280   NtContinue  (1244332, 0, ...
 04829   280   NtContinue  (1244332, 0, ...
 04830   280   NtContinue  (1244332, 0, ...
 04831   280   NtContinue  (1244332, 0, ...
 04832   280   NtContinue  (1244332, 0, ...
 04833   280   NtContinue  (1244332, 0, ...
 04834   280   NtContinue  (1244332, 0, ...
 04835   280   NtContinue  (1244336, 0, ...
 04836   280   NtContinue  (1244332, 0, ...
 04837   280   NtContinue  (1244336, 0, ...
 04838   280   NtContinue  (1244332, 0, ...
 04839   280   NtContinue  (1244332, 0, ...
 04840   280   NtContinue  (1244332, 0, ...
 04841   280   NtContinue  (1244332, 0, ...
 04842   280   NtContinue  (1244332, 0, ...
 04843   280   NtContinue  (1244332, 0, ...
 04844   280   NtContinue  (1244332, 0, ...
 04845   280   NtContinue  (1244332, 0, ...
 04846   280   NtContinue  (1244332, 0, ...
 04847   280   NtContinue  (1244332, 0, ...
 04848   280   NtContinue  (1244332, 0, ...
 04849   280   NtContinue  (1244332, 0, ...
 04850   280   NtContinue  (1244332, 0, ...
 04851   280   NtContinue  (1244332, 0, ...
 04852   280   NtContinue  (1244332, 0, ...
 04853   280   NtContinue  (1244332, 0, ...
 04854   280   NtContinue  (1244332, 0, ...
 04855   280   NtContinue  (1244332, 0, ...
 04856   280   NtContinue  (1244332, 0, ...
 04857   280   NtContinue  (1244332, 0, ...
 04858   280   NtContinue  (1244332, 0, ...
 04859   280   NtContinue  (1244332, 0, ...
 04860   280   NtContinue  (1244332, 0, ...
 04861   280   NtContinue  (1244336, 0, ...
 04862   280   NtContinue  (1244332, 0, ...
 04863   280   NtContinue  (1244332, 0, ...
 04864   280   NtContinue  (1244332, 0, ...
 04865   280   NtContinue  (1244332, 0, ...
 04866   280   NtContinue  (1244332, 0, ...
 04867   280   NtContinue  (1244332, 0, ...
 04868   280   NtContinue  (1244332, 0, ...
 04869   280   NtContinue  (1244332, 0, ...
 04870   280   NtContinue  (1244332, 0, ...
 04871   280   NtContinue  (1244332, 0, ...
 04872   280   NtContinue  (1244336, 0, ...
 04873   280   NtContinue  (1244332, 0, ...
 04874   280   NtContinue  (1244332, 0, ...
 04875   280   NtContinue  (1244336, 0, ...
 04876   280   NtContinue  (1244332, 0, ...
 04877   280   NtContinue  (1244332, 0, ...
 04878   280   NtContinue  (1244332, 0, ...
 04879   280   NtContinue  (1244332, 0, ...
 04880   280   NtContinue  (1244332, 0, ...
 04881   280   NtContinue  (1244332, 0, ...
 04882   280   NtContinue  (1244332, 0, ...
 04883   280   NtContinue  (1244332, 0, ...
 04884   280   NtContinue  (1244332, 0, ...
 04885   280   NtContinue  (1244332, 0, ...
 04886   280   NtContinue  (1244332, 0, ...
 04887   280   NtContinue  (1244332, 0, ...
 04888   280   NtContinue  (1244332, 0, ...
 04889   280   NtContinue  (1244332, 0, ...
 04890   280   NtContinue  (1244332, 0, ...
 04891   280   NtContinue  (1244332, 0, ...
 04892   280   NtContinue  (1244332, 0, ...
 04893   280   NtContinue  (1244332, 0, ...
 04894   280   NtContinue  (1244332, 0, ...
 04895   280   NtContinue  (1244332, 0, ...
 04896   280   NtContinue  (1244332, 0, ...
 04897   280   NtContinue  (1244332, 0, ...
 04898   280   NtContinue  (1244332, 0, ...
 04899   280   NtContinue  (1244332, 0, ...
 04900   280   NtContinue  (1244332, 0, ...
 04901   280   NtContinue  (1244332, 0, ...
 04902   280   NtContinue  (1244332, 0, ...
 04903   280   NtContinue  (1244336, 0, ...
 04904   280   NtContinue  (1244332, 0, ...
 04905   280   NtContinue  (1244332, 0, ...
 04906   280   NtContinue  (1244336, 0, ...
 04907   280   NtContinue  (1244332, 0, ...
 04908   280   NtContinue  (1244332, 0, ...
 04909   280   NtContinue  (1244332, 0, ...
 04910   280   NtContinue  (1244332, 0, ...
 04911   280   NtContinue  (1244332, 0, ...
 04912   280   NtContinue  (1244332, 0, ...
 04913   280   NtContinue  (1244332, 0, ...
 04914   280   NtContinue  (1244332, 0, ...
 04915   280   NtContinue  (1244332, 0, ...
 04916   280   NtContinue  (1244332, 0, ...
 04917   280   NtContinue  (1244332, 0, ...
 04918   280   NtContinue  (1244332, 0, ...
 04919   280   NtContinue  (1244332, 0, ...
 04920   280   NtContinue  (1244332, 0, ...
 04921   280   NtContinue  (1244332, 0, ...
 04922   280   NtContinue  (1244332, 0, ...
 04923   280   NtContinue  (1244332, 0, ...
 04924   280   NtContinue  (1244332, 0, ...
 04925   280   NtContinue  (1244332, 0, ...
 04926   280   NtContinue  (1244332, 0, ...
 04927   280   NtContinue  (1244332, 0, ...
 04928   280   NtContinue  (1244332, 0, ...
 04929   280   NtContinue  (1244332, 0, ...
 04930   280   NtContinue  (1244332, 0, ...
 04931   280   NtContinue  (1244332, 0, ...
 04932   280   NtContinue  (1244332, 0, ...
 04933   280   NtContinue  (1244332, 0, ...
 04934   280   NtContinue  (1244332, 0, ...
 04935   280   NtContinue  (1244332, 0, ...
 04936   280   NtContinue  (1244332, 0, ...
 04937   280   NtContinue  (1244332, 0, ...
 04938   280   NtContinue  (1244332, 0, ...
 04939   280   NtContinue  (1244332, 0, ...
 04940   280   NtContinue  (1244332, 0, ...
 04941   280   NtContinue  (1244332, 0, ...
 04942   280   NtContinue  (1244336, 0, ...
 04943   280   NtContinue  (1244332, 0, ...
 04944   280   NtContinue  (1244332, 0, ...
 04945   280   NtContinue  (1244320, 0, ...
 04946   280   NtContinue  (1244300, 0, ...
 04947   280   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04948   280   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   280   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04950   280   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04951   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04952   280   NtReleaseMutant  (16, ...
 04953   280   NtContinue  (-132415352, 0, ...
 04952   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04954   280   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04955   280   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04956   280   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04957   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04958   280   NtReleaseMutant  (16, ...
 04959   280   NtContinue  (-132415352, 0, ...
 04958   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04960   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04961   280   NtReleaseMutant  (16, ...
 04962   280   NtContinue  (-132415352, 0, ...
 04961   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04963   280   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04964   280   NtReleaseMutant  (16, ...
 04965   280   NtContinue  (-132415352, 0, ...
 04964   280   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED