Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 25 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 46 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 46 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 13 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   676   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   676   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   676   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   676   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   676   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   676   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   676   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   676   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   676   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   676   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   676   NtClose  (12, ... ) == 0x0
 00014   676   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   676   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   676   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   676   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   676   NtClose  (16, ... ) == 0x0
 00021   676   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   676   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   676   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18481152}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18481152}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   676   NtClose  (16, ... ) == 0x0
 00026   676   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   676   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   676   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   676   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   676   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" ... {28, 56, reply, 0, 472, 676, 1538, 0} "`\324\26\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" )  ... {28, 56, reply, 0, 472, 676, 1538, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" ... {28, 56, reply, 0, 472, 676, 1538, 0} "`\324\26\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\32\1\4\0\0\0" )  ) == 0x0
 00032   676   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   676   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   676   NtClose  (16, ... ) == 0x0
 00036   676   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   676   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   676   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   676   NtClose  (28, ... ) == 0x0
 00041   676   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   676   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   676   NtClose  (28, ... ) == 0x0
 00045   676   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   676   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   676   NtClose  (28, ... ) == 0x0
 00049   676   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   676   NtClose  (28, ... ) == 0x0
 00052   676   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   676   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   676   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   676   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" ... {28, 56, reply, 0, 472, 676, 1539, 0} "(\261\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" )  ... {28, 56, reply, 0, 472, 676, 1539, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\32\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" ... {28, 56, reply, 0, 472, 676, 1539, 0} "(\261\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\32\18\6\0\0" )  ) == 0x0
 00056   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   676   NtClose  (28, ... ) == 0x0
 00062   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   676   NtClose  (28, ... ) == 0x0
 00065   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   676   NtClose  (28, ... ) == 0x0
 00068   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   676   NtClose  (28, ... ) == 0x0
 00071   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   676   NtClose  (28, ... ) == 0x0
 00080   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   676   NtClose  (28, ... ) == 0x0
 00083   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   676   NtClose  (28, ... ) == 0x0
 00086   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   676   NtClose  (28, ... ) == 0x0
 00095   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   676   NtClose  (28, ... ) == 0x0
 00098   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   676   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   676   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   676   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   676   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   676   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   676   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   676   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   676   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   676   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   676   NtClose  (40, ... ) == 0x0
 00115   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   676   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   676   NtClose  (40, ... ) == 0x0
 00119   676   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   676   NtClose  (36, ... ) == 0x0
 00121   676   NtClose  (28, ... ) == 0x0
 00122   676   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   676   NtClose  (32, ... ) == 0x0
 00124   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   676   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   676   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   676   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   676   NtClose  (32, ... ) == 0x0
 00132   676   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   676   NtClose  (28, ... ) == 0x0
 00134   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   676   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   676   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   676   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   676   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   676   NtClose  (28, ... ) == 0x0
 00146   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   676   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   676   NtClose  (28, ... ) == 0x0
 00149   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   676   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   676   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   676   NtClose  (28, ... ) == 0x0
 00153   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   676   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   676   NtClose  (28, ... ) == 0x0
 00156   676   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   676   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   676   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   676   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\32\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" ... {28, 56, reply, 0, 472, 676, 1571, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" )  ... {28, 56, reply, 0, 472, 676, 1571, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\32\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" ... {28, 56, reply, 0, 472, 676, 1571, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\32\1$\1\0\0" )  ) == 0x0
 00161   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   676   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   676   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   676   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   676   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482020, ) == 0x0
 00166   676   NtQueryInformationToken  (-2147482020, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   676   NtQueryInformationToken  (-2147482020, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   676   NtClose  (-2147482020, ... ) == 0x0
 00169   676   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   676   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   676   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   676   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00173   676   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   676   NtClose  (-2147482020, ... ) == 0x0
 00175   676   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   676   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   676   NtClose  (-2147482020, ... ) == 0x0
 00178   676   NtQueryDefaultLocale  (0, -132118004, ... ) == 0x0
 00179   676   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   676   NtUserCallNoParam  (24, ... ) == 0x0
 00181   676   NtGdiCreateCompatibleDC  (0, ...
 00182   676   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   676   NtGdiCreateCompatibleDC  ... ) == 0xe010451
 00183   676   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   676   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   676   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0xb050458
 00186   676   NtGdiCreateSolidBrush  (0, 0, ...
 00187   676   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   676   NtGdiCreateSolidBrush  ... ) == 0x810045b
 00188   676   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   676   NtGdiCreateCompatibleDC  (0, ... ) == 0x601045c
 00190   676   NtGdiSelectBitmap  (100729948, 184878168, ... ) == 0x185000f
 00191   676   NtUserGetThreadDesktop  (676, 0, ... ) == 0x2c
 00192   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   676   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   676   NtClose  (52, ... ) == 0x0
 00195   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810cc017
 00197   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810cc01c
 00199   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810cc01e
 00201   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810c8002
 00203   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810cc018
 00205   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810cc01a
 00207   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810cc01d
 00209   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810cc026
 00211   676   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   676   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810cc019
 00213   676   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc020
 00214   676   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc022
 00215   676   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810cc023
 00216   676   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810cc024
 00217   676   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00218   676   NtAllocateVirtualMemory  (-1, 6074368, 0, 4096, 4096, 32, ... 6074368, 4096, ) == 0x0
 00217   676   NtUserRegisterClassExWOW  ... ) == 0x810cc025
 00219   676   NtCallbackReturn  (0, 0, 0, ...
 00220   676   NtGdiInit  (... ) == 0x1
 00221   676   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   676   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   676   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   676   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   676   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   676   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   676   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   676   NtClose  (52, ... ) == 0x0
 00230   676   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   676   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   676   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   676   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   676   NtClose  (52, ... ) == 0x0
 00236   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   676   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   676   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   676   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   676   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   676   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   676   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   676   NtClose  (52, ... ) == 0x0
 00246   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   676   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   676   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   676   NtClose  (52, ... ) == 0x0
 00250   676   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   676   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   676   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   676   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   676   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   676   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   676   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   676   NtClose  (56, ... ) == 0x0
 00258   676   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   676   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   676   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   676   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   676   NtClose  (56, ... ) == 0x0
 00263   676   NtQueryDefaultUILanguage  (1241756, ...
 00264   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   676   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   676   NtClose  (-2147482020, ... ) == 0x0
 00268   676   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   676   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   676   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   676   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   676   NtClose  (-2147482032, ... ) == 0x0
 00273   676   NtClose  (-2147482020, ... ) == 0x0
 00263   676   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   676   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   676   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   676   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   676   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   676   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   676   NtQueryDefaultUILanguage  (2013024600, ...
 00281   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   676   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   676   NtClose  (-2147482020, ... ) == 0x0
 00285   676   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   676   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   676   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   676   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   676   NtClose  (-2147482032, ... ) == 0x0
 00290   676   NtClose  (-2147482020, ... ) == 0x0
 00280   676   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   676   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   676   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   676   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   676   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   676   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\32\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 472, 676, 1572, 0} "(\350\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 472, 676, 1572, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\32\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 472, 676, 1572, 0} "(\350\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\32\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\32\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   676   NtClose  (56, ... ) == 0x0
 00297   676   NtClose  (60, ... ) == 0x0
 00298   676   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   676   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   676   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   676   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   676   NtClose  (56, ... ) == 0x0
 00314   676   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   676   NtClose  (64, ... ) == 0x0
 00316   676   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   676   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   676   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   676   NtClose  (64, ... ) == 0x0
 00321   676   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   676   NtClose  (56, ... ) == 0x0
 00323   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   676   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   676   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   676   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   676   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   676   NtQueryDefaultUILanguage  (1239368, ...
 00346   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   676   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   676   NtClose  (-2147482020, ... ) == 0x0
 00350   676   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   676   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   676   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   676   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   676   NtClose  (-2147482032, ... ) == 0x0
 00355   676   NtClose  (-2147482020, ... ) == 0x0
 00345   676   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   676   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   676   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   676   NtClose  (56, ... ) == 0x0
 00361   676   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   676   NtClose  (64, ... ) == 0x0
 00363   676   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   676   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   676   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   676   NtClose  (64, ... ) == 0x0
 00368   676   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   676   NtClose  (56, ... ) == 0x0
 00370   676   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   676   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   676   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   676   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   676   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   676   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   676   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\32\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 472, 676, 1573, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 472, 676, 1573, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\32\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 472, 676, 1573, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\32\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\32\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   676   NtClose  (56, ... ) == 0x0
 00378   676   NtClose  (64, ... ) == 0x0
 00379   676   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   676   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   676   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   676   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   676   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   676   NtUserGetDC  (0, ... ) == 0x1010050
 00385   676   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00386   676   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   676   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   676   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   676   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   676   NtClose  (64, ... ) == 0x0
 00391   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   676   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   676   NtClose  (64, ... ) == 0x0
 00395   676   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   676   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   676   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   676   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   676   NtClose  (56, ... ) == 0x0
 00400   676   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   676   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   676   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   676   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   676   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   676   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   676   NtClose  (68, ... ) == 0x0
 00407   676   NtClose  (56, ... ) == 0x0
 00408   676   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   676   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   676   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   676   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   676   NtClose  (56, ... ) == 0x0
 00413   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03b
 00415   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc03d
 00416   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc03f
 00418   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc041
 00420   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc043
 00422   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc045
 00423   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc047
 00425   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc049
 00427   676   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04b
 00430   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04d
 00432   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc04f
 00434   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc051
 00435   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc053
 00437   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc055
 00439   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc057
 00440   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc059
 00442   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05b
 00444   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05d
 00446   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc05f
 00448   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc017
 00450   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc019
 00452   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc018
 00454   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01a
 00456   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   676   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810cc01c
 00458   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00459   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810cc01e
 00460   676   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00461   676   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ... ) == 0x810cc01b
 00462   676   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00463   676   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810cc068
 00464   676   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00465   676   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ...
 00466   676   NtAllocateVirtualMemory  (-1, 6078464, 0, 4096, 4096, 32, ... 6078464, 4096, ) == 0x0
 00465   676   NtUserRegisterClassExWOW  ... ) == 0x810cc06a
 00467   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00468   676   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00469   676   NtClose  (56, ... ) == 0x0
 00470   676   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {472, 0}, ... 56, ) == 0x0
 00471   676   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00472   676   NtClose  (56, ... ) == 0x0
 00473   676   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00474   676   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00475   676   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00476   676   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00477   676   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00478   676   NtClose  (56, ... ) == 0x0
 00479   676   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00480   676   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00481   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00482   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00483   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03b
 00484   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03d
 00486   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc03f
 00489   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc041
 00492   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc043
 00495   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc045
 00497   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc047
 00500   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   676   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   676   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810cc049
 00503   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04b
 00506   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04d
 00509   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc04f
 00512   676   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   676   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810cc051
 00514   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc053
 00517   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc055
 00520   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc057
 00521   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc059
 00524   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05b
 00527   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05d
 00530   676   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   676   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   676   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810cc05f
 00533   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   676   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   676   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   676   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   676   NtTestAlert  (... ) == 0x0
 00554   676   NtContinue  (1244464, 1, ...
 00555   676   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   676   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   676   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   676   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   676   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   676   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   676   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   676   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   676   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   676   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   676   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   676   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   676   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   676   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   676   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   676   NtClose  (56, ... ) == 0x0
 00572   676   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   676   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   676   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   676   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   676   NtClose  (56, ... ) == 0x0
 00580   676   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   676   NtClose  (68, ... ) == 0x0
 00582   676   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   676   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   676   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   676   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   676   NtClose  (68, ... ) == 0x0
 00587   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   676   NtReleaseMutant  (16, ...
 00589   676   NtContinue  (-132120440, 0, ...
 00588   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   676   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   676   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   676   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   676   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   676   NtUserCallNoParam  (29, ...
 00595   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   676   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   676   NtClose  (68, ... ) == 0x0
 00599   676   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   676   NtClose  (56, ... ) == 0x0
 00601   676   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   676   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   676   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   676   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   676   NtClose  (56, ... ) == 0x0
 00607   676   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   676   NtClose  (68, ... ) == 0x0
 00609   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00610   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00611   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   676   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   676   NtClose  (68, ... ) == 0x0
 00615   676   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   676   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   676   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   676   NtClose  (56, ... ) == 0x0
 00619   676   NtClose  (68, ... ) == 0x0
 00620   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   676   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   676   NtClose  (68, ... ) == 0x0
 00624   676   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   676   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   676   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   676   NtClose  (56, ... ) == 0x0
 00628   676   NtClose  (68, ... ) == 0x0
 00629   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   676   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   676   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   676   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   676   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   676   NtUserGetGUIThreadInfo  (676, 1244344, ... ) == 0x1
 00636   676   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   676   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 472, 676, 1575, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 472, 676, 1575, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 472, 676, 1575, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   676   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 472, 676, 1576, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 472, 676, 1576, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 472, 676, 1576, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   676   NtUserCallNoParam  (29, ...
 00640   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   676   NtUserCallNoParam  ... ) == 0x0
 00641   676   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   676   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0x70a045d
 00643   676   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0x60a045e
 00644   676   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 472, 676, 1577, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 472, 676, 1577, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 472, 676, 1577, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   676   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00647   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00648   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00649   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00650   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00651   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00652   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00653   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00654   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00655   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00656   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00657   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00658   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00659   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00660   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00661   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00662   676   NtUserGetWindowDC  (0, ... ) == 0x1010051
 00663   676   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0x1100460
 00664   676   NtUserCallOneParam  (16842833, 56, ... ) == 0x1
 00665   676   NtUserCallNoParam  (29, ...
 00666   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   676   NtUserCallNoParam  ... ) == 0x0
 00667   676   NtUserCallNoParam  (29, ...
 00668   676   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   676   NtUserCallNoParam  ... ) == 0x0
 00594   676   NtUserCallNoParam  ... ) == 0x1
 00669   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   676   NtReleaseMutant  (16, ...
 00671   676   NtContinue  (-132120440, 0, ...
 00670   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   676   NtReleaseMutant  (16, ...
 00674   676   NtContinue  (-132120440, 0, ...
 00673   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   676   NtReleaseMutant  (16, ...
 00677   676   NtContinue  (-132120440, 0, ...
 00676   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   676   NtReleaseMutant  (16, ...
 00680   676   NtContinue  (-132120440, 0, ...
 00679   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   676   NtReleaseMutant  (16, ...
 00683   676   NtContinue  (-132120440, 0, ...
 00682   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   676   NtReleaseMutant  (16, ...
 00686   676   NtContinue  (-132120440, 0, ...
 00685   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   676   NtReleaseMutant  (16, ...
 00689   676   NtContinue  (-132120440, 0, ...
 00688   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   676   NtReleaseMutant  (16, ...
 00692   676   NtContinue  (-132120440, 0, ...
 00691   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   676   NtReleaseMutant  (16, ...
 00695   676   NtContinue  (-132120440, 0, ...
 00694   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   676   NtReleaseMutant  (16, ...
 00698   676   NtContinue  (-132120440, 0, ...
 00697   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   676   NtReleaseMutant  (16, ...
 00701   676   NtContinue  (-132120440, 0, ...
 00700   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   676   NtReleaseMutant  (16, ...
 00704   676   NtContinue  (-132120440, 0, ...
 00703   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   676   NtReleaseMutant  (16, ...
 00707   676   NtContinue  (-132120440, 0, ...
 00706   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   676   NtReleaseMutant  (16, ...
 00710   676   NtContinue  (-132120440, 0, ...
 00709   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   676   NtReleaseMutant  (16, ...
 00713   676   NtContinue  (-132120440, 0, ...
 00712   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   676   NtReleaseMutant  (16, ...
 00716   676   NtContinue  (-132120440, 0, ...
 00715   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   676   NtReleaseMutant  (16, ...
 00719   676   NtContinue  (-132120440, 0, ...
 00718   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   676   NtReleaseMutant  (16, ...
 00722   676   NtContinue  (-132120440, 0, ...
 00721   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   676   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   676   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   676   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   676   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   676   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   676   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   676   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   676   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   676   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   676   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   676   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   676   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   676   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   676   NtClose  (88, ... ) == 0x0
 00741   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   676   NtClose  (88, ... ) == 0x0
 00746   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   676   NtClose  (88, ... ) == 0x0
 00751   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   676   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   676   NtClose  (88, ... ) == 0x0
 00757   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   676   NtClose  (88, ... ) == 0x0
 00762   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   676   NtClose  (88, ... ) == 0x0
 00767   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   676   NtClose  (88, ... ) == 0x0
 00772   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   676   NtClose  (88, ... ) == 0x0
 00777   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   676   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   676   NtClose  (88, ... ) == 0x0
 00783   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\330\1\0\0\244\2\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   676   NtClose  (88, ... ) == 0x0
 00788   676   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   676   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\330\1\0\0\244\2\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\330\1\0\0\244\2\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\330\1\0\0\244\2\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\330\1\0\0\244\2\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\330\1\0\0\244\2\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\330\1\0\0\244\2\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\330\1\0\0\244\2\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\330\1\0\0\244\2\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\330\1\0\0\244\2\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\330\1\0\0\244\2\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   676   NtClose  (88, ... ) == 0x0
 00793   676   NtClose  (84, ... ) == 0x0
 00794   676   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   676   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   676   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   676   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   676   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   676   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   676   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   676   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   676   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   676   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   676   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   676   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   676   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   676   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   676   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   676   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   676   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   676   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   676   NtClose  (96, ... ) == 0x0
 00817   676   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   676   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   676   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   676   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   676   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   676   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   676   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   676   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   676   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   676   NtClose  (96, ... ) == 0x0
 00831   676   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   676   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   676   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   676   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   676   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   676   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   676   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   676   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   676   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   676   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   676   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   676   NtClose  (96, ... ) == 0x0
 00846   676   NtClose  (92, ... ) == 0x0
 00847   676   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   676   NtClose  (72, ... ) == 0x0
 00849   676   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   676   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   676   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   676   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   676   NtClose  (72, ... ) == 0x0
 00854   676   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   676   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   676   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   676   NtAllocateVirtualMemory  (-1, 9846784, 0, 16384, 4096, 4, ... 9846784, 16384, ) == 0x0
 00858   676   NtAllocateVirtualMemory  (-1, 0, 0, 326, 4096, 64, ... 9502720, 4096, ) == 0x0
 00859   676   NtFreeVirtualMemory  (-1, (0x964000), 16384, 16384, ... (0x964000), 16384, ) == 0x0
 00860   676   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00861   676   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00862   676   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00863   676   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00864   676   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00865   676   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00866   676   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00867   676   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00868   676   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00869   676   NtClose  (92, ... ) == 0x0
 00870   676   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00871   676   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00872   676   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00873   676   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00874   676   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00875   676   NtClose  (92, ... ) == 0x0
 00876   676   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00877   676   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00878   676   NtClose  (92, ... ) == 0x0
 00879   676   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00880   676   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00881   676   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00882   676   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00883   676   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00884   676   NtClose  (92, ... ) == 0x0
 00885   676   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00886   676   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00887   676   NtClose  (92, ... ) == 0x0
 00888   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00889   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00890   676   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00891   676   NtClose  (92, ... ) == 0x0
 00892   676   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00893   676   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00894   676   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00895   676   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00896   676   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00897   676   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00898   676   NtSetInformationFile  (-2147482808, -132119988, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00899   676   NtSetInformationFile  (-2147482808, -132119620, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00900   676   NtSetInformationFile  (-2147482808, -132119612, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   676   NtCreateKey  ... 100, 1, ) == 0x0
 00901   676   NtClose  (96, ... ) == 0x0
 00902   676   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00903   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00904   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00905   676   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00906   676   NtClose  (96, ... ) == 0x0
 00907   676   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00908   676   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00909   676   NtClose  (102, ... ) == 0x0
 00910   676   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00911   676   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00912   676   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00913   676   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00914   676   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00915   676   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00916   676   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00917   676   NtClose  (96, ... ) == 0x0
 00918   676   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00919   676   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00920   676   NtClose  (102, ... ) == 0x0
 00921   676   NtContinue  (1244308, 0, ...
 00922   676   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00923   676   NtContinue  (1244292, 0, ...
 00924   676   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00925   676   NtContinue  (1244292, 0, ...
 00926   676   NtContinue  (1244300, 0, ...
 00927   676   NtContinue  (1244288, 0, ...
 00928   676   NtContinue  (1244300, 0, ...
 00929   676   NtContinue  (1244308, 0, ...
 00930   676   NtContinue  (1244300, 0, ...
 00931   676   NtContinue  (1244300, 0, ...
 00932   676   NtContinue  (1244300, 0, ...
 00933   676   NtContinue  (1244300, 0, ...
 00934   676   NtContinue  (1244300, 0, ...
 00935   676   NtContinue  (1244300, 0, ...
 00936   676   NtContinue  (1244300, 0, ...
 00937   676   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00938   676   NtContinue  (1244308, 0, ...
 00939   676   NtContinue  (1244308, 0, ...
 00940   676   NtContinue  (1244308, 0, ...
 00941   676   NtContinue  (1244308, 0, ...
 00942   676   NtContinue  (1244308, 0, ...
 00943   676   NtContinue  (1244308, 0, ...
 00944   676   NtContinue  (1244308, 0, ...
 00945   676   NtContinue  (1244308, 0, ...
 00946   676   NtContinue  (1244308, 0, ...
 00947   676   NtContinue  (1244308, 0, ...
 00948   676   NtContinue  (1244308, 0, ...
 00949   676   NtContinue  (1244308, 0, ...
 00950   676   NtContinue  (1244308, 0, ...
 00951   676   NtContinue  (1244308, 0, ...
 00952   676   NtContinue  (1244308, 0, ...
 00953   676   NtContinue  (1244308, 0, ...
 00954   676   NtContinue  (1244308, 0, ...
 00955   676   NtContinue  (1244308, 0, ...
 00956   676   NtContinue  (1244308, 0, ...
 00957   676   NtContinue  (1244308, 0, ...
 00958   676   NtContinue  (1244308, 0, ...
 00959   676   NtContinue  (1244308, 0, ...
 00960   676   NtContinue  (1244308, 0, ...
 00961   676   NtContinue  (1244308, 0, ...
 00962   676   NtContinue  (1244308, 0, ...
 00963   676   NtContinue  (1244308, 0, ...
 00964   676   NtContinue  (1244308, 0, ...
 00965   676   NtContinue  (1244308, 0, ...
 00966   676   NtContinue  (1244308, 0, ...
 00967   676   NtContinue  (1244308, 0, ...
 00968   676   NtContinue  (1244308, 0, ...
 00969   676   NtContinue  (1244308, 0, ...
 00970   676   NtContinue  (1244308, 0, ...
 00971   676   NtContinue  (1244308, 0, ...
 00972   676   NtContinue  (1244308, 0, ...
 00973   676   NtContinue  (1244308, 0, ...
 00974   676   NtContinue  (1244308, 0, ...
 00975   676   NtContinue  (1244308, 0, ...
 00976   676   NtContinue  (1244308, 0, ...
 00977   676   NtContinue  (1244308, 0, ...
 00978   676   NtContinue  (1244308, 0, ...
 00979   676   NtContinue  (1244308, 0, ...
 00980   676   NtContinue  (1244308, 0, ...
 00981   676   NtContinue  (1244308, 0, ...
 00982   676   NtContinue  (1244308, 0, ...
 00983   676   NtContinue  (1244308, 0, ...
 00984   676   NtContinue  (1244308, 0, ...
 00985   676   NtContinue  (1244308, 0, ...
 00986   676   NtContinue  (1244308, 0, ...
 00987   676   NtContinue  (1244308, 0, ...
 00988   676   NtContinue  (1244308, 0, ...
 00989   676   NtContinue  (1244308, 0, ...
 00990   676   NtContinue  (1244308, 0, ...
 00991   676   NtContinue  (1244308, 0, ...
 00992   676   NtContinue  (1244308, 0, ...
 00993   676   NtContinue  (1244308, 0, ...
 00994   676   NtContinue  (1244308, 0, ...
 00995   676   NtContinue  (1244308, 0, ...
 00996   676   NtContinue  (1244308, 0, ...
 00997   676   NtContinue  (1244308, 0, ...
 00998   676   NtContinue  (1244308, 0, ...
 00999   676   NtContinue  (1244308, 0, ...
 01000   676   NtContinue  (1244308, 0, ...
 01001   676   NtContinue  (1244308, 0, ...
 01002   676   NtContinue  (1244308, 0, ...
 01003   676   NtContinue  (1244308, 0, ...
 01004   676   NtContinue  (1244308, 0, ...
 01005   676   NtContinue  (1244308, 0, ...
 01006   676   NtContinue  (1244308, 0, ...
 01007   676   NtContinue  (1244308, 0, ...
 01008   676   NtContinue  (1244308, 0, ...
 01009   676   NtContinue  (1244308, 0, ...
 01010   676   NtContinue  (1244308, 0, ...
 01011   676   NtContinue  (1244308, 0, ...
 01012   676   NtContinue  (1244308, 0, ...
 01013   676   NtContinue  (1244308, 0, ...
 01014   676   NtContinue  (1244308, 0, ...
 01015   676   NtContinue  (1244308, 0, ...
 01016   676   NtContinue  (1244308, 0, ...
 01017   676   NtContinue  (1244308, 0, ...
 01018   676   NtContinue  (1244308, 0, ...
 01019   676   NtContinue  (1244308, 0, ...
 01020   676   NtContinue  (1244308, 0, ...
 01021   676   NtContinue  (1244308, 0, ...
 01022   676   NtContinue  (1244308, 0, ...
 01023   676   NtContinue  (1244308, 0, ...
 01024   676   NtContinue  (1244308, 0, ...
 01025   676   NtContinue  (1244308, 0, ...
 01026   676   NtContinue  (1244308, 0, ...
 01027   676   NtContinue  (1244308, 0, ...
 01028   676   NtContinue  (1244308, 0, ...
 01029   676   NtContinue  (1244308, 0, ...
 01030   676   NtContinue  (1244308, 0, ...
 01031   676   NtContinue  (1244308, 0, ...
 01032   676   NtContinue  (1244308, 0, ...
 01033   676   NtContinue  (1244308, 0, ...
 01034   676   NtContinue  (1244308, 0, ...
 01035   676   NtContinue  (1244308, 0, ...
 01036   676   NtContinue  (1244308, 0, ...
 01037   676   NtContinue  (1244308, 0, ...
 01038   676   NtContinue  (1244308, 0, ...
 01039   676   NtContinue  (1244308, 0, ...
 01040   676   NtContinue  (1244308, 0, ...
 01041   676   NtContinue  (1244308, 0, ...
 01042   676   NtContinue  (1244308, 0, ...
 01043   676   NtContinue  (1244308, 0, ...
 01044   676   NtContinue  (1244308, 0, ...
 01045   676   NtContinue  (1244308, 0, ...
 01046   676   NtContinue  (1244308, 0, ...
 01047   676   NtContinue  (1244308, 0, ...
 01048   676   NtContinue  (1244308, 0, ...
 01049   676   NtContinue  (1244308, 0, ...
 01050   676   NtContinue  (1244308, 0, ...
 01051   676   NtContinue  (1244308, 0, ...
 01052   676   NtContinue  (1244308, 0, ...
 01053   676   NtContinue  (1244308, 0, ...
 01054   676   NtContinue  (1244308, 0, ...
 01055   676   NtContinue  (1244308, 0, ...
 01056   676   NtContinue  (1244308, 0, ...
 01057   676   NtContinue  (1244308, 0, ...
 01058   676   NtContinue  (1244308, 0, ...
 01059   676   NtContinue  (1244308, 0, ...
 01060   676   NtContinue  (1244308, 0, ...
 01061   676   NtContinue  (1244308, 0, ...
 01062   676   NtContinue  (1244308, 0, ...
 01063   676   NtContinue  (1244308, 0, ...
 01064   676   NtContinue  (1244308, 0, ...
 01065   676   NtContinue  (1244308, 0, ...
 01066   676   NtContinue  (1244308, 0, ...
 01067   676   NtContinue  (1244308, 0, ...
 01068   676   NtContinue  (1244308, 0, ...
 01069   676   NtContinue  (1244308, 0, ...
 01070   676   NtContinue  (1244308, 0, ...
 01071   676   NtContinue  (1244308, 0, ...
 01072   676   NtContinue  (1244308, 0, ...
 01073   676   NtContinue  (1244308, 0, ...
 01074   676   NtContinue  (1244308, 0, ...
 01075   676   NtContinue  (1244308, 0, ...
 01076   676   NtContinue  (1244308, 0, ...
 01077   676   NtContinue  (1244308, 0, ...
 01078   676   NtContinue  (1244308, 0, ...
 01079   676   NtContinue  (1244308, 0, ...
 01080   676   NtContinue  (1244308, 0, ...
 01081   676   NtContinue  (1244308, 0, ...
 01082   676   NtContinue  (1244308, 0, ...
 01083   676   NtContinue  (1244308, 0, ...
 01084   676   NtContinue  (1244308, 0, ...
 01085   676   NtContinue  (1244308, 0, ...
 01086   676   NtContinue  (1244308, 0, ...
 01087   676   NtContinue  (1244308, 0, ...
 01088   676   NtContinue  (1244308, 0, ...
 01089   676   NtContinue  (1244308, 0, ...
 01090   676   NtContinue  (1244308, 0, ...
 01091   676   NtContinue  (1244308, 0, ...
 01092   676   NtContinue  (1244308, 0, ...
 01093   676   NtContinue  (1244308, 0, ...
 01094   676   NtContinue  (1244308, 0, ...
 01095   676   NtContinue  (1244308, 0, ...
 01096   676   NtContinue  (1244308, 0, ...
 01097   676   NtContinue  (1244308, 0, ...
 01098   676   NtContinue  (1244308, 0, ...
 01099   676   NtContinue  (1244308, 0, ...
 01100   676   NtContinue  (1244308, 0, ...
 01101   676   NtContinue  (1244308, 0, ...
 01102   676   NtContinue  (1244308, 0, ...
 01103   676   NtContinue  (1244308, 0, ...
 01104   676   NtContinue  (1244308, 0, ...
 01105   676   NtContinue  (1244308, 0, ...
 01106   676   NtContinue  (1244308, 0, ...
 01107   676   NtContinue  (1244308, 0, ...
 01108   676   NtContinue  (1244308, 0, ...
 01109   676   NtContinue  (1244308, 0, ...
 01110   676   NtContinue  (1244308, 0, ...
 01111   676   NtContinue  (1244308, 0, ...
 01112   676   NtContinue  (1244308, 0, ...
 01113   676   NtContinue  (1244308, 0, ...
 01114   676   NtContinue  (1244308, 0, ...
 01115   676   NtContinue  (1244308, 0, ...
 01116   676   NtContinue  (1244308, 0, ...
 01117   676   NtContinue  (1244308, 0, ...
 01118   676   NtContinue  (1244308, 0, ...
 01119   676   NtContinue  (1244308, 0, ...
 01120   676   NtContinue  (1244308, 0, ...
 01121   676   NtContinue  (1244308, 0, ...
 01122   676   NtContinue  (1244308, 0, ...
 01123   676   NtContinue  (1244308, 0, ...
 01124   676   NtContinue  (1244308, 0, ...
 01125   676   NtContinue  (1244308, 0, ...
 01126   676   NtContinue  (1244308, 0, ...
 01127   676   NtContinue  (1244308, 0, ...
 01128   676   NtContinue  (1244308, 0, ...
 01129   676   NtContinue  (1244308, 0, ...
 01130   676   NtContinue  (1244308, 0, ...
 01131   676   NtContinue  (1244308, 0, ...
 01132   676   NtContinue  (1244308, 0, ...
 01133   676   NtContinue  (1244308, 0, ...
 01134   676   NtContinue  (1244308, 0, ...
 01135   676   NtContinue  (1244308, 0, ...
 01136   676   NtContinue  (1244308, 0, ...
 01137   676   NtContinue  (1244308, 0, ...
 01138   676   NtContinue  (1244308, 0, ...
 01139   676   NtContinue  (1244308, 0, ...
 01140   676   NtContinue  (1244308, 0, ...
 01141   676   NtContinue  (1244308, 0, ...
 01142   676   NtContinue  (1244308, 0, ...
 01143   676   NtContinue  (1244308, 0, ...
 01144   676   NtContinue  (1244308, 0, ...
 01145   676   NtContinue  (1244308, 0, ...
 01146   676   NtContinue  (1244308, 0, ...
 01147   676   NtContinue  (1244308, 0, ...
 01148   676   NtContinue  (1244308, 0, ...
 01149   676   NtContinue  (1244308, 0, ...
 01150   676   NtContinue  (1244308, 0, ...
 01151   676   NtContinue  (1244308, 0, ...
 01152   676   NtContinue  (1244308, 0, ...
 01153   676   NtContinue  (1244308, 0, ...
 01154   676   NtContinue  (1244308, 0, ...
 01155   676   NtContinue  (1244308, 0, ...
 01156   676   NtContinue  (1244308, 0, ...
 01157   676   NtContinue  (1244308, 0, ...
 01158   676   NtContinue  (1244308, 0, ...
 01159   676   NtContinue  (1244308, 0, ...
 01160   676   NtContinue  (1244308, 0, ...
 01161   676   NtContinue  (1244308, 0, ...
 01162   676   NtContinue  (1244308, 0, ...
 01163   676   NtContinue  (1244308, 0, ...
 01164   676   NtContinue  (1244308, 0, ...
 01165   676   NtContinue  (1244308, 0, ...
 01166   676   NtContinue  (1244308, 0, ...
 01167   676   NtContinue  (1244308, 0, ...
 01168   676   NtContinue  (1244308, 0, ...
 01169   676   NtContinue  (1244308, 0, ...
 01170   676   NtContinue  (1244308, 0, ...
 01171   676   NtContinue  (1244308, 0, ...
 01172   676   NtContinue  (1244308, 0, ...
 01173   676   NtContinue  (1244308, 0, ...
 01174   676   NtContinue  (1244308, 0, ...
 01175   676   NtContinue  (1244308, 0, ...
 01176   676   NtContinue  (1244308, 0, ...
 01177   676   NtContinue  (1244308, 0, ...
 01178   676   NtContinue  (1244308, 0, ...
 01179   676   NtContinue  (1244308, 0, ...
 01180   676   NtContinue  (1244308, 0, ...
 01181   676   NtContinue  (1244308, 0, ...
 01182   676   NtContinue  (1244308, 0, ...
 01183   676   NtContinue  (1244308, 0, ...
 01184   676   NtContinue  (1244308, 0, ...
 01185   676   NtContinue  (1244308, 0, ...
 01186   676   NtContinue  (1244308, 0, ...
 01187   676   NtContinue  (1244308, 0, ...
 01188   676   NtContinue  (1244308, 0, ...
 01189   676   NtContinue  (1244308, 0, ...
 01190   676   NtContinue  (1244308, 0, ...
 01191   676   NtContinue  (1244308, 0, ...
 01192   676   NtContinue  (1244308, 0, ...
 01193   676   NtContinue  (1244308, 0, ...
 01194   676   NtContinue  (1244308, 0, ...
 01195   676   NtContinue  (1244308, 0, ...
 01196   676   NtContinue  (1244308, 0, ...
 01197   676   NtContinue  (1244308, 0, ...
 01198   676   NtContinue  (1244308, 0, ...
 01199   676   NtContinue  (1244308, 0, ...
 01200   676   NtContinue  (1244308, 0, ...
 01201   676   NtContinue  (1244308, 0, ...
 01202   676   NtContinue  (1244308, 0, ...
 01203   676   NtContinue  (1244308, 0, ...
 01204   676   NtContinue  (1244308, 0, ...
 01205   676   NtContinue  (1244308, 0, ...
 01206   676   NtContinue  (1244308, 0, ...
 01207   676   NtContinue  (1244308, 0, ...
 01208   676   NtContinue  (1244308, 0, ...
 01209   676   NtContinue  (1244308, 0, ...
 01210   676   NtContinue  (1244308, 0, ...
 01211   676   NtContinue  (1244308, 0, ...
 01212   676   NtContinue  (1244308, 0, ...
 01213   676   NtContinue  (1244308, 0, ...
 01214   676   NtContinue  (1244308, 0, ...
 01215   676   NtContinue  (1244308, 0, ...
 01216   676   NtContinue  (1244308, 0, ...
 01217   676   NtContinue  (1244308, 0, ...
 01218   676   NtContinue  (1244308, 0, ...
 01219   676   NtContinue  (1244308, 0, ...
 01220   676   NtContinue  (1244308, 0, ...
 01221   676   NtContinue  (1244308, 0, ...
 01222   676   NtContinue  (1244308, 0, ...
 01223   676   NtContinue  (1244308, 0, ...
 01224   676   NtContinue  (1244308, 0, ...
 01225   676   NtContinue  (1244308, 0, ...
 01226   676   NtContinue  (1244308, 0, ...
 01227   676   NtContinue  (1244308, 0, ...
 01228   676   NtContinue  (1244308, 0, ...
 01229   676   NtContinue  (1244308, 0, ...
 01230   676   NtContinue  (1244308, 0, ...
 01231   676   NtContinue  (1244308, 0, ...
 01232   676   NtContinue  (1244308, 0, ...
 01233   676   NtContinue  (1244308, 0, ...
 01234   676   NtContinue  (1244308, 0, ...
 01235   676   NtContinue  (1244308, 0, ...
 01236   676   NtContinue  (1244308, 0, ...
 01237   676   NtContinue  (1244308, 0, ...
 01238   676   NtContinue  (1244308, 0, ...
 01239   676   NtContinue  (1244308, 0, ...
 01240   676   NtContinue  (1244308, 0, ...
 01241   676   NtContinue  (1244308, 0, ...
 01242   676   NtContinue  (1244308, 0, ...
 01243   676   NtContinue  (1244308, 0, ...
 01244   676   NtContinue  (1244308, 0, ...
 01245   676   NtContinue  (1244308, 0, ...
 01246   676   NtContinue  (1244308, 0, ...
 01247   676   NtContinue  (1244308, 0, ...
 01248   676   NtContinue  (1244308, 0, ...
 01249   676   NtContinue  (1244308, 0, ...
 01250   676   NtContinue  (1244308, 0, ...
 01251   676   NtContinue  (1244308, 0, ...
 01252   676   NtContinue  (1244308, 0, ...
 01253   676   NtContinue  (1244308, 0, ...
 01254   676   NtContinue  (1244308, 0, ...
 01255   676   NtContinue  (1244308, 0, ...
 01256   676   NtContinue  (1244308, 0, ...
 01257   676   NtContinue  (1244308, 0, ...
 01258   676   NtContinue  (1244308, 0, ...
 01259   676   NtContinue  (1244308, 0, ...
 01260   676   NtContinue  (1244308, 0, ...
 01261   676   NtContinue  (1244308, 0, ...
 01262   676   NtContinue  (1244308, 0, ...
 01263   676   NtContinue  (1244308, 0, ...
 01264   676   NtContinue  (1244308, 0, ...
 01265   676   NtContinue  (1244308, 0, ...
 01266   676   NtContinue  (1244308, 0, ...
 01267   676   NtContinue  (1244308, 0, ...
 01268   676   NtContinue  (1244308, 0, ...
 01269   676   NtContinue  (1244308, 0, ...
 01270   676   NtContinue  (1244308, 0, ...
 01271   676   NtContinue  (1244308, 0, ...
 01272   676   NtContinue  (1244308, 0, ...
 01273   676   NtContinue  (1244308, 0, ...
 01274   676   NtContinue  (1244308, 0, ...
 01275   676   NtContinue  (1244308, 0, ...
 01276   676   NtContinue  (1244308, 0, ...
 01277   676   NtContinue  (1244308, 0, ...
 01278   676   NtContinue  (1244308, 0, ...
 01279   676   NtContinue  (1244308, 0, ...
 01280   676   NtContinue  (1244308, 0, ...
 01281   676   NtContinue  (1244308, 0, ...
 01282   676   NtContinue  (1244308, 0, ...
 01283   676   NtContinue  (1244308, 0, ...
 01284   676   NtContinue  (1244308, 0, ...
 01285   676   NtContinue  (1244308, 0, ...
 01286   676   NtContinue  (1244308, 0, ...
 01287   676   NtContinue  (1244308, 0, ...
 01288   676   NtContinue  (1244308, 0, ...
 01289   676   NtContinue  (1244308, 0, ...
 01290   676   NtContinue  (1244308, 0, ...
 01291   676   NtContinue  (1244308, 0, ...
 01292   676   NtContinue  (1244308, 0, ...
 01293   676   NtContinue  (1244308, 0, ...
 01294   676   NtContinue  (1244308, 0, ...
 01295   676   NtContinue  (1244308, 0, ...
 01296   676   NtContinue  (1244308, 0, ...
 01297   676   NtContinue  (1244308, 0, ...
 01298   676   NtContinue  (1244308, 0, ...
 01299   676   NtContinue  (1244308, 0, ...
 01300   676   NtContinue  (1244308, 0, ...
 01301   676   NtContinue  (1244308, 0, ...
 01302   676   NtContinue  (1244308, 0, ...
 01303   676   NtContinue  (1244308, 0, ...
 01304   676   NtContinue  (1244308, 0, ...
 01305   676   NtContinue  (1244308, 0, ...
 01306   676   NtContinue  (1244308, 0, ...
 01307   676   NtContinue  (1244308, 0, ...
 01308   676   NtContinue  (1244308, 0, ...
 01309   676   NtContinue  (1244308, 0, ...
 01310   676   NtContinue  (1244308, 0, ...
 01311   676   NtContinue  (1244308, 0, ...
 01312   676   NtContinue  (1244308, 0, ...
 01313   676   NtContinue  (1244308, 0, ...
 01314   676   NtContinue  (1244308, 0, ...
 01315   676   NtContinue  (1244308, 0, ...
 01316   676   NtContinue  (1244308, 0, ...
 01317   676   NtContinue  (1244308, 0, ...
 01318   676   NtContinue  (1244308, 0, ...
 01319   676   NtContinue  (1244308, 0, ...
 01320   676   NtContinue  (1244308, 0, ...
 01321   676   NtContinue  (1244308, 0, ...
 01322   676   NtContinue  (1244308, 0, ...
 01323   676   NtContinue  (1244308, 0, ...
 01324   676   NtContinue  (1244308, 0, ...
 01325   676   NtContinue  (1244308, 0, ...
 01326   676   NtContinue  (1244308, 0, ...
 01327   676   NtContinue  (1244308, 0, ...
 01328   676   NtContinue  (1244308, 0, ...
 01329   676   NtContinue  (1244308, 0, ...
 01330   676   NtContinue  (1244308, 0, ...
 01331   676   NtContinue  (1244308, 0, ...
 01332   676   NtContinue  (1244308, 0, ...
 01333   676   NtContinue  (1244308, 0, ...
 01334   676   NtContinue  (1244308, 0, ...
 01335   676   NtContinue  (1244308, 0, ...
 01336   676   NtContinue  (1244308, 0, ...
 01337   676   NtContinue  (1244308, 0, ...
 01338   676   NtContinue  (1244308, 0, ...
 01339   676   NtContinue  (1244308, 0, ...
 01340   676   NtContinue  (1244308, 0, ...
 01341   676   NtContinue  (1244308, 0, ...
 01342   676   NtContinue  (1244308, 0, ...
 01343   676   NtContinue  (1244308, 0, ...
 01344   676   NtContinue  (1244308, 0, ...
 01345   676   NtContinue  (1244308, 0, ...
 01346   676   NtContinue  (1244308, 0, ...
 01347   676   NtContinue  (1244308, 0, ...
 01348   676   NtContinue  (1244308, 0, ...
 01349   676   NtContinue  (1244308, 0, ...
 01350   676   NtContinue  (1244308, 0, ...
 01351   676   NtContinue  (1244308, 0, ...
 01352   676   NtContinue  (1244308, 0, ...
 01353   676   NtContinue  (1244308, 0, ...
 01354   676   NtContinue  (1244308, 0, ...
 01355   676   NtContinue  (1244308, 0, ...
 01356   676   NtContinue  (1244308, 0, ...
 01357   676   NtContinue  (1244308, 0, ...
 01358   676   NtContinue  (1244308, 0, ...
 01359   676   NtContinue  (1244308, 0, ...
 01360   676   NtContinue  (1244308, 0, ...
 01361   676   NtContinue  (1244308, 0, ...
 01362   676   NtContinue  (1244308, 0, ...
 01363   676   NtContinue  (1244308, 0, ...
 01364   676   NtContinue  (1244308, 0, ...
 01365   676   NtContinue  (1244308, 0, ...
 01366   676   NtContinue  (1244308, 0, ...
 01367   676   NtContinue  (1244308, 0, ...
 01368   676   NtContinue  (1244308, 0, ...
 01369   676   NtContinue  (1244308, 0, ...
 01370   676   NtContinue  (1244308, 0, ...
 01371   676   NtContinue  (1244308, 0, ...
 01372   676   NtContinue  (1244308, 0, ...
 01373   676   NtContinue  (1244308, 0, ...
 01374   676   NtContinue  (1244308, 0, ...
 01375   676   NtContinue  (1244308, 0, ...
 01376   676   NtContinue  (1244308, 0, ...
 01377   676   NtContinue  (1244308, 0, ...
 01378   676   NtContinue  (1244308, 0, ...
 01379   676   NtContinue  (1244308, 0, ...
 01380   676   NtContinue  (1244308, 0, ...
 01381   676   NtContinue  (1244308, 0, ...
 01382   676   NtContinue  (1244308, 0, ...
 01383   676   NtContinue  (1244308, 0, ...
 01384   676   NtContinue  (1244308, 0, ...
 01385   676   NtContinue  (1244308, 0, ...
 01386   676   NtContinue  (1244308, 0, ...
 01387   676   NtContinue  (1244308, 0, ...
 01388   676   NtContinue  (1244308, 0, ...
 01389   676   NtContinue  (1244308, 0, ...
 01390   676   NtContinue  (1244308, 0, ...
 01391   676   NtContinue  (1244308, 0, ...
 01392   676   NtContinue  (1244308, 0, ...
 01393   676   NtContinue  (1244308, 0, ...
 01394   676   NtContinue  (1244308, 0, ...
 01395   676   NtContinue  (1244308, 0, ...
 01396   676   NtContinue  (1244308, 0, ...
 01397   676   NtContinue  (1244308, 0, ...
 01398   676   NtContinue  (1244308, 0, ...
 01399   676   NtContinue  (1244308, 0, ...
 01400   676   NtContinue  (1244308, 0, ...
 01401   676   NtContinue  (1244308, 0, ...
 01402   676   NtContinue  (1244308, 0, ...
 01403   676   NtContinue  (1244308, 0, ...
 01404   676   NtContinue  (1244308, 0, ...
 01405   676   NtContinue  (1244308, 0, ...
 01406   676   NtContinue  (1244308, 0, ...
 01407   676   NtContinue  (1244308, 0, ...
 01408   676   NtContinue  (1244308, 0, ...
 01409   676   NtContinue  (1244308, 0, ...
 01410   676   NtContinue  (1244308, 0, ...
 01411   676   NtContinue  (1244308, 0, ...
 01412   676   NtContinue  (1244308, 0, ...
 01413   676   NtContinue  (1244308, 0, ...
 01414   676   NtContinue  (1244308, 0, ...
 01415   676   NtContinue  (1244308, 0, ...
 01416   676   NtContinue  (1244308, 0, ...
 01417   676   NtContinue  (1244308, 0, ...
 01418   676   NtContinue  (1244308, 0, ...
 01419   676   NtContinue  (1244308, 0, ...
 01420   676   NtContinue  (1244308, 0, ...
 01421   676   NtContinue  (1244308, 0, ...
 01422   676   NtContinue  (1244308, 0, ...
 01423   676   NtContinue  (1244308, 0, ...
 01424   676   NtContinue  (1244308, 0, ...
 01425   676   NtContinue  (1244308, 0, ...
 01426   676   NtContinue  (1244308, 0, ...
 01427   676   NtContinue  (1244308, 0, ...
 01428   676   NtContinue  (1244308, 0, ...
 01429   676   NtContinue  (1244308, 0, ...
 01430   676   NtContinue  (1244308, 0, ...
 01431   676   NtContinue  (1244308, 0, ...
 01432   676   NtContinue  (1244308, 0, ...
 01433   676   NtContinue  (1244308, 0, ...
 01434   676   NtContinue  (1244308, 0, ...
 01435   676   NtContinue  (1244308, 0, ...
 01436   676   NtContinue  (1244308, 0, ...
 01437   676   NtContinue  (1244308, 0, ...
 01438   676   NtContinue  (1244308, 0, ...
 01439   676   NtContinue  (1244308, 0, ...
 01440   676   NtContinue  (1244308, 0, ...
 01441   676   NtContinue  (1244308, 0, ...
 01442   676   NtContinue  (1244308, 0, ...
 01443   676   NtContinue  (1244308, 0, ...
 01444   676   NtContinue  (1244308, 0, ...
 01445   676   NtContinue  (1244308, 0, ...
 01446   676   NtContinue  (1244308, 0, ...
 01447   676   NtContinue  (1244308, 0, ...
 01448   676   NtContinue  (1244308, 0, ...
 01449   676   NtContinue  (1244308, 0, ...
 01450   676   NtContinue  (1244308, 0, ...
 01451   676   NtContinue  (1244308, 0, ...
 01452   676   NtContinue  (1244308, 0, ...
 01453   676   NtContinue  (1244308, 0, ...
 01454   676   NtContinue  (1244308, 0, ...
 01455   676   NtContinue  (1244308, 0, ...
 01456   676   NtContinue  (1244308, 0, ...
 01457   676   NtContinue  (1244308, 0, ...
 01458   676   NtContinue  (1244308, 0, ...
 01459   676   NtContinue  (1244308, 0, ...
 01460   676   NtContinue  (1244308, 0, ...
 01461   676   NtContinue  (1244308, 0, ...
 01462   676   NtContinue  (1244308, 0, ...
 01463   676   NtContinue  (1244308, 0, ...
 01464   676   NtContinue  (1244308, 0, ...
 01465   676   NtContinue  (1244308, 0, ...
 01466   676   NtContinue  (1244308, 0, ...
 01467   676   NtContinue  (1244308, 0, ...
 01468   676   NtContinue  (1244308, 0, ...
 01469   676   NtContinue  (1244308, 0, ...
 01470   676   NtContinue  (1244308, 0, ...
 01471   676   NtContinue  (1244308, 0, ...
 01472   676   NtContinue  (1244308, 0, ...
 01473   676   NtContinue  (1244308, 0, ...
 01474   676   NtContinue  (1244308, 0, ...
 01475   676   NtContinue  (1244308, 0, ...
 01476   676   NtContinue  (1244308, 0, ...
 01477   676   NtContinue  (1244308, 0, ...
 01478   676   NtContinue  (1244308, 0, ...
 01479   676   NtContinue  (1244308, 0, ...
 01480   676   NtContinue  (1244308, 0, ...
 01481   676   NtContinue  (1244308, 0, ...
 01482   676   NtContinue  (1244308, 0, ...
 01483   676   NtContinue  (1244308, 0, ...
 01484   676   NtContinue  (1244308, 0, ...
 01485   676   NtContinue  (1244308, 0, ...
 01486   676   NtContinue  (1244308, 0, ...
 01487   676   NtContinue  (1244308, 0, ...
 01488   676   NtContinue  (1244308, 0, ...
 01489   676   NtContinue  (1244308, 0, ...
 01490   676   NtContinue  (1244308, 0, ...
 01491   676   NtContinue  (1244308, 0, ...
 01492   676   NtContinue  (1244308, 0, ...
 01493   676   NtContinue  (1244308, 0, ...
 01494   676   NtContinue  (1244308, 0, ...
 01495   676   NtContinue  (1244308, 0, ...
 01496   676   NtContinue  (1244308, 0, ...
 01497   676   NtContinue  (1244308, 0, ...
 01498   676   NtContinue  (1244308, 0, ...
 01499   676   NtContinue  (1244308, 0, ...
 01500   676   NtContinue  (1244308, 0, ...
 01501   676   NtContinue  (1244308, 0, ...
 01502   676   NtContinue  (1244308, 0, ...
 01503   676   NtContinue  (1244308, 0, ...
 01504   676   NtContinue  (1244308, 0, ...
 01505   676   NtContinue  (1244308, 0, ...
 01506   676   NtContinue  (1244308, 0, ...
 01507   676   NtContinue  (1244308, 0, ...
 01508   676   NtContinue  (1244308, 0, ...
 01509   676   NtContinue  (1244308, 0, ...
 01510   676   NtContinue  (1244308, 0, ...
 01511   676   NtContinue  (1244308, 0, ...
 01512   676   NtContinue  (1244308, 0, ...
 01513   676   NtContinue  (1244308, 0, ...
 01514   676   NtContinue  (1244308, 0, ...
 01515   676   NtContinue  (1244308, 0, ...
 01516   676   NtContinue  (1244308, 0, ...
 01517   676   NtContinue  (1244308, 0, ...
 01518   676   NtContinue  (1244308, 0, ...
 01519   676   NtContinue  (1244308, 0, ...
 01520   676   NtContinue  (1244308, 0, ...
 01521   676   NtContinue  (1244308, 0, ...
 01522   676   NtContinue  (1244308, 0, ...
 01523   676   NtContinue  (1244308, 0, ...
 01524   676   NtContinue  (1244308, 0, ...
 01525   676   NtContinue  (1244308, 0, ...
 01526   676   NtContinue  (1244308, 0, ...
 01527   676   NtContinue  (1244308, 0, ...
 01528   676   NtContinue  (1244308, 0, ...
 01529   676   NtContinue  (1244308, 0, ...
 01530   676   NtContinue  (1244308, 0, ...
 01531   676   NtContinue  (1244308, 0, ...
 01532   676   NtContinue  (1244308, 0, ...
 01533   676   NtContinue  (1244308, 0, ...
 01534   676   NtContinue  (1244308, 0, ...
 01535   676   NtContinue  (1244308, 0, ...
 01536   676   NtContinue  (1244308, 0, ...
 01537   676   NtContinue  (1244308, 0, ...
 01538   676   NtContinue  (1244308, 0, ...
 01539   676   NtContinue  (1244308, 0, ...
 01540   676   NtContinue  (1244308, 0, ...
 01541   676   NtContinue  (1244308, 0, ...
 01542   676   NtContinue  (1244308, 0, ...
 01543   676   NtContinue  (1244308, 0, ...
 01544   676   NtContinue  (1244308, 0, ...
 01545   676   NtContinue  (1244308, 0, ...
 01546   676   NtContinue  (1244308, 0, ...
 01547   676   NtContinue  (1244308, 0, ...
 01548   676   NtContinue  (1244308, 0, ...
 01549   676   NtContinue  (1244308, 0, ...
 01550   676   NtContinue  (1244308, 0, ...
 01551   676   NtContinue  (1244308, 0, ...
 01552   676   NtContinue  (1244308, 0, ...
 01553   676   NtContinue  (1244308, 0, ...
 01554   676   NtContinue  (1244308, 0, ...
 01555   676   NtContinue  (1244308, 0, ...
 01556   676   NtContinue  (1244308, 0, ...
 01557   676   NtContinue  (1244308, 0, ...
 01558   676   NtContinue  (1244308, 0, ...
 01559   676   NtContinue  (1244308, 0, ...
 01560   676   NtContinue  (1244308, 0, ...
 01561   676   NtContinue  (1244308, 0, ...
 01562   676   NtContinue  (1244308, 0, ...
 01563   676   NtContinue  (1244308, 0, ...
 01564   676   NtContinue  (1244308, 0, ...
 01565   676   NtContinue  (1244308, 0, ...
 01566   676   NtContinue  (1244308, 0, ...
 01567   676   NtContinue  (1244308, 0, ...
 01568   676   NtContinue  (1244308, 0, ...
 01569   676   NtContinue  (1244308, 0, ...
 01570   676   NtContinue  (1244308, 0, ...
 01571   676   NtContinue  (1244308, 0, ...
 01572   676   NtContinue  (1244308, 0, ...
 01573   676   NtContinue  (1244308, 0, ...
 01574   676   NtContinue  (1244308, 0, ...
 01575   676   NtContinue  (1244308, 0, ...
 01576   676   NtContinue  (1244308, 0, ...
 01577   676   NtContinue  (1244308, 0, ...
 01578   676   NtContinue  (1244308, 0, ...
 01579   676   NtContinue  (1244308, 0, ...
 01580   676   NtContinue  (1244308, 0, ...
 01581   676   NtContinue  (1244308, 0, ...
 01582   676   NtContinue  (1244308, 0, ...
 01583   676   NtContinue  (1244308, 0, ...
 01584   676   NtContinue  (1244308, 0, ...
 01585   676   NtContinue  (1244308, 0, ...
 01586   676   NtContinue  (1244308, 0, ...
 01587   676   NtContinue  (1244308, 0, ...
 01588   676   NtContinue  (1244308, 0, ...
 01589   676   NtContinue  (1244308, 0, ...
 01590   676   NtContinue  (1244308, 0, ...
 01591   676   NtContinue  (1244308, 0, ...
 01592   676   NtContinue  (1244308, 0, ...
 01593   676   NtContinue  (1244308, 0, ...
 01594   676   NtContinue  (1244308, 0, ...
 01595   676   NtContinue  (1244308, 0, ...
 01596   676   NtContinue  (1244308, 0, ...
 01597   676   NtContinue  (1244308, 0, ...
 01598   676   NtContinue  (1244308, 0, ...
 01599   676   NtContinue  (1244308, 0, ...
 01600   676   NtContinue  (1244308, 0, ...
 01601   676   NtContinue  (1244308, 0, ...
 01602   676   NtContinue  (1244308, 0, ...
 01603   676   NtContinue  (1244308, 0, ...
 01604   676   NtContinue  (1244308, 0, ...
 01605   676   NtContinue  (1244308, 0, ...
 01606   676   NtContinue  (1244308, 0, ...
 01607   676   NtContinue  (1244308, 0, ...
 01608   676   NtContinue  (1244308, 0, ...
 01609   676   NtContinue  (1244308, 0, ...
 01610   676   NtContinue  (1244308, 0, ...
 01611   676   NtContinue  (1244308, 0, ...
 01612   676   NtContinue  (1244308, 0, ...
 01613   676   NtContinue  (1244308, 0, ...
 01614   676   NtContinue  (1244308, 0, ...
 01615   676   NtContinue  (1244308, 0, ...
 01616   676   NtContinue  (1244308, 0, ...
 01617   676   NtContinue  (1244308, 0, ...
 01618   676   NtContinue  (1244308, 0, ...
 01619   676   NtContinue  (1244308, 0, ...
 01620   676   NtContinue  (1244308, 0, ...
 01621   676   NtContinue  (1244308, 0, ...
 01622   676   NtContinue  (1244308, 0, ...
 01623   676   NtContinue  (1244308, 0, ...
 01624   676   NtContinue  (1244308, 0, ...
 01625   676   NtContinue  (1244308, 0, ...
 01626   676   NtContinue  (1244308, 0, ...
 01627   676   NtContinue  (1244308, 0, ...
 01628   676   NtContinue  (1244308, 0, ...
 01629   676   NtContinue  (1244308, 0, ...
 01630   676   NtContinue  (1244308, 0, ...
 01631   676   NtContinue  (1244308, 0, ...
 01632   676   NtContinue  (1244308, 0, ...
 01633   676   NtContinue  (1244308, 0, ...
 01634   676   NtContinue  (1244308, 0, ...
 01635   676   NtContinue  (1244308, 0, ...
 01636   676   NtContinue  (1244308, 0, ...
 01637   676   NtContinue  (1244308, 0, ...
 01638   676   NtContinue  (1244308, 0, ...
 01639   676   NtContinue  (1244308, 0, ...
 01640   676   NtContinue  (1244308, 0, ...
 01641   676   NtContinue  (1244308, 0, ...
 01642   676   NtContinue  (1244308, 0, ...
 01643   676   NtContinue  (1244308, 0, ...
 01644   676   NtContinue  (1244308, 0, ...
 01645   676   NtContinue  (1244308, 0, ...
 01646   676   NtContinue  (1244308, 0, ...
 01647   676   NtContinue  (1244308, 0, ...
 01648   676   NtContinue  (1244308, 0, ...
 01649   676   NtContinue  (1244308, 0, ...
 01650   676   NtContinue  (1244308, 0, ...
 01651   676   NtContinue  (1244308, 0, ...
 01652   676   NtContinue  (1244308, 0, ...
 01653   676   NtContinue  (1244308, 0, ...
 01654   676   NtContinue  (1244308, 0, ...
 01655   676   NtContinue  (1244308, 0, ...
 01656   676   NtContinue  (1244308, 0, ...
 01657   676   NtContinue  (1244308, 0, ...
 01658   676   NtContinue  (1244308, 0, ...
 01659   676   NtContinue  (1244308, 0, ...
 01660   676   NtContinue  (1244308, 0, ...
 01661   676   NtContinue  (1244308, 0, ...
 01662   676   NtContinue  (1244308, 0, ...
 01663   676   NtContinue  (1244308, 0, ...
 01664   676   NtContinue  (1244308, 0, ...
 01665   676   NtContinue  (1244308, 0, ...
 01666   676   NtContinue  (1244308, 0, ...
 01667   676   NtContinue  (1244308, 0, ...
 01668   676   NtContinue  (1244308, 0, ...
 01669   676   NtContinue  (1244308, 0, ...
 01670   676   NtContinue  (1244308, 0, ...
 01671   676   NtContinue  (1244308, 0, ...
 01672   676   NtContinue  (1244308, 0, ...
 01673   676   NtContinue  (1244308, 0, ...
 01674   676   NtContinue  (1244308, 0, ...
 01675   676   NtContinue  (1244308, 0, ...
 01676   676   NtContinue  (1244308, 0, ...
 01677   676   NtContinue  (1244308, 0, ...
 01678   676   NtContinue  (1244308, 0, ...
 01679   676   NtContinue  (1244308, 0, ...
 01680   676   NtContinue  (1244308, 0, ...
 01681   676   NtContinue  (1244308, 0, ...
 01682   676   NtContinue  (1244308, 0, ...
 01683   676   NtContinue  (1244308, 0, ...
 01684   676   NtContinue  (1244308, 0, ...
 01685   676   NtContinue  (1244308, 0, ...
 01686   676   NtContinue  (1244308, 0, ...
 01687   676   NtContinue  (1244308, 0, ...
 01688   676   NtContinue  (1244308, 0, ...
 01689   676   NtContinue  (1244308, 0, ...
 01690   676   NtContinue  (1244308, 0, ...
 01691   676   NtContinue  (1244308, 0, ...
 01692   676   NtContinue  (1244308, 0, ...
 01693   676   NtContinue  (1244308, 0, ...
 01694   676   NtContinue  (1244308, 0, ...
 01695   676   NtContinue  (1244308, 0, ...
 01696   676   NtContinue  (1244308, 0, ...
 01697   676   NtContinue  (1244308, 0, ...
 01698   676   NtContinue  (1244308, 0, ...
 01699   676   NtContinue  (1244308, 0, ...
 01700   676   NtContinue  (1244308, 0, ...
 01701   676   NtContinue  (1244308, 0, ...
 01702   676   NtContinue  (1244308, 0, ...
 01703   676   NtContinue  (1244308, 0, ...
 01704   676   NtContinue  (1244308, 0, ...
 01705   676   NtContinue  (1244308, 0, ...
 01706   676   NtContinue  (1244308, 0, ...
 01707   676   NtContinue  (1244308, 0, ...
 01708   676   NtContinue  (1244308, 0, ...
 01709   676   NtContinue  (1244308, 0, ...
 01710   676   NtContinue  (1244308, 0, ...
 01711   676   NtContinue  (1244308, 0, ...
 01712   676   NtContinue  (1244308, 0, ...
 01713   676   NtContinue  (1244308, 0, ...
 01714   676   NtContinue  (1244308, 0, ...
 01715   676   NtContinue  (1244308, 0, ...
 01716   676   NtContinue  (1244308, 0, ...
 01717   676   NtContinue  (1244308, 0, ...
 01718   676   NtContinue  (1244308, 0, ...
 01719   676   NtContinue  (1244308, 0, ...
 01720   676   NtContinue  (1244308, 0, ...
 01721   676   NtContinue  (1244308, 0, ...
 01722   676   NtContinue  (1244308, 0, ...
 01723   676   NtContinue  (1244308, 0, ...
 01724   676   NtContinue  (1244308, 0, ...
 01725   676   NtContinue  (1244308, 0, ...
 01726   676   NtContinue  (1244308, 0, ...
 01727   676   NtContinue  (1244308, 0, ...
 01728   676   NtContinue  (1244308, 0, ...
 01729   676   NtContinue  (1244308, 0, ...
 01730   676   NtContinue  (1244308, 0, ...
 01731   676   NtContinue  (1244308, 0, ...
 01732   676   NtContinue  (1244308, 0, ...
 01733   676   NtContinue  (1244308, 0, ...
 01734   676   NtContinue  (1244308, 0, ...
 01735   676   NtContinue  (1244308, 0, ...
 01736   676   NtContinue  (1244308, 0, ...
 01737   676   NtContinue  (1244308, 0, ...
 01738   676   NtContinue  (1244308, 0, ...
 01739   676   NtContinue  (1244308, 0, ...
 01740   676   NtContinue  (1244308, 0, ...
 01741   676   NtContinue  (1244308, 0, ...
 01742   676   NtContinue  (1244308, 0, ...
 01743   676   NtContinue  (1244308, 0, ...
 01744   676   NtContinue  (1244308, 0, ...
 01745   676   NtContinue  (1244308, 0, ...
 01746   676   NtContinue  (1244308, 0, ...
 01747   676   NtContinue  (1244308, 0, ...
 01748   676   NtContinue  (1244308, 0, ...
 01749   676   NtContinue  (1244308, 0, ...
 01750   676   NtContinue  (1244308, 0, ...
 01751   676   NtContinue  (1244308, 0, ...
 01752   676   NtContinue  (1244308, 0, ...
 01753   676   NtContinue  (1244308, 0, ...
 01754   676   NtContinue  (1244308, 0, ...
 01755   676   NtContinue  (1244308, 0, ...
 01756   676   NtContinue  (1244308, 0, ...
 01757   676   NtContinue  (1244308, 0, ...
 01758   676   NtContinue  (1244308, 0, ...
 01759   676   NtContinue  (1244308, 0, ...
 01760   676   NtContinue  (1244308, 0, ...
 01761   676   NtContinue  (1244308, 0, ...
 01762   676   NtContinue  (1244308, 0, ...
 01763   676   NtContinue  (1244308, 0, ...
 01764   676   NtContinue  (1244308, 0, ...
 01765   676   NtContinue  (1244308, 0, ...
 01766   676   NtContinue  (1244308, 0, ...
 01767   676   NtContinue  (1244308, 0, ...
 01768   676   NtContinue  (1244308, 0, ...
 01769   676   NtContinue  (1244308, 0, ...
 01770   676   NtContinue  (1244308, 0, ...
 01771   676   NtContinue  (1244308, 0, ...
 01772   676   NtContinue  (1244308, 0, ...
 01773   676   NtContinue  (1244308, 0, ...
 01774   676   NtContinue  (1244308, 0, ...
 01775   676   NtContinue  (1244308, 0, ...
 01776   676   NtContinue  (1244308, 0, ...
 01777   676   NtContinue  (1244308, 0, ...
 01778   676   NtContinue  (1244308, 0, ...
 01779   676   NtContinue  (1244308, 0, ...
 01780   676   NtContinue  (1244308, 0, ...
 01781   676   NtContinue  (1244308, 0, ...
 01782   676   NtContinue  (1244308, 0, ...
 01783   676   NtContinue  (1244308, 0, ...
 01784   676   NtContinue  (1244308, 0, ...
 01785   676   NtContinue  (1244308, 0, ...
 01786   676   NtContinue  (1244308, 0, ...
 01787   676   NtContinue  (1244308, 0, ...
 01788   676   NtContinue  (1244308, 0, ...
 01789   676   NtContinue  (1244308, 0, ...
 01790   676   NtContinue  (1244308, 0, ...
 01791   676   NtContinue  (1244308, 0, ...
 01792   676   NtContinue  (1244308, 0, ...
 01793   676   NtContinue  (1244308, 0, ...
 01794   676   NtContinue  (1244308, 0, ...
 01795   676   NtContinue  (1244308, 0, ...
 01796   676   NtContinue  (1244308, 0, ...
 01797   676   NtContinue  (1244308, 0, ...
 01798   676   NtContinue  (1244308, 0, ...
 01799   676   NtContinue  (1244308, 0, ...
 01800   676   NtContinue  (1244308, 0, ...
 01801   676   NtContinue  (1244308, 0, ...
 01802   676   NtContinue  (1244308, 0, ...
 01803   676   NtContinue  (1244308, 0, ...
 01804   676   NtContinue  (1244308, 0, ...
 01805   676   NtContinue  (1244308, 0, ...
 01806   676   NtContinue  (1244308, 0, ...
 01807   676   NtContinue  (1244308, 0, ...
 01808   676   NtContinue  (1244308, 0, ...
 01809   676   NtContinue  (1244308, 0, ...
 01810   676   NtContinue  (1244308, 0, ...
 01811   676   NtContinue  (1244308, 0, ...
 01812   676   NtContinue  (1244308, 0, ...
 01813   676   NtContinue  (1244308, 0, ...
 01814   676   NtContinue  (1244308, 0, ...
 01815   676   NtContinue  (1244308, 0, ...
 01816   676   NtContinue  (1244308, 0, ...
 01817   676   NtContinue  (1244308, 0, ...
 01818   676   NtContinue  (1244308, 0, ...
 01819   676   NtContinue  (1244308, 0, ...
 01820   676   NtContinue  (1244308, 0, ...
 01821   676   NtContinue  (1244308, 0, ...
 01822   676   NtContinue  (1244308, 0, ...
 01823   676   NtContinue  (1244308, 0, ...
 01824   676   NtContinue  (1244308, 0, ...
 01825   676   NtContinue  (1244308, 0, ...
 01826   676   NtContinue  (1244308, 0, ...
 01827   676   NtContinue  (1244308, 0, ...
 01828   676   NtContinue  (1244308, 0, ...
 01829   676   NtContinue  (1244308, 0, ...
 01830   676   NtContinue  (1244308, 0, ...
 01831   676   NtContinue  (1244308, 0, ...
 01832   676   NtContinue  (1244308, 0, ...
 01833   676   NtContinue  (1244308, 0, ...
 01834   676   NtContinue  (1244308, 0, ...
 01835   676   NtContinue  (1244308, 0, ...
 01836   676   NtContinue  (1244308, 0, ...
 01837   676   NtContinue  (1244308, 0, ...
 01838   676   NtContinue  (1244308, 0, ...
 01839   676   NtContinue  (1244308, 0, ...
 01840   676   NtContinue  (1244308, 0, ...
 01841   676   NtContinue  (1244308, 0, ...
 01842   676   NtContinue  (1244308, 0, ...
 01843   676   NtContinue  (1244308, 0, ...
 01844   676   NtContinue  (1244308, 0, ...
 01845   676   NtContinue  (1244308, 0, ...
 01846   676   NtContinue  (1244308, 0, ...
 01847   676   NtContinue  (1244308, 0, ...
 01848   676   NtContinue  (1244308, 0, ...
 01849   676   NtContinue  (1244308, 0, ...
 01850   676   NtContinue  (1244308, 0, ...
 01851   676   NtContinue  (1244308, 0, ...
 01852   676   NtContinue  (1244308, 0, ...
 01853   676   NtContinue  (1244308, 0, ...
 01854   676   NtContinue  (1244308, 0, ...
 01855   676   NtContinue  (1244308, 0, ...
 01856   676   NtContinue  (1244308, 0, ...
 01857   676   NtContinue  (1244308, 0, ...
 01858   676   NtContinue  (1244308, 0, ...
 01859   676   NtContinue  (1244308, 0, ...
 01860   676   NtContinue  (1244308, 0, ...
 01861   676   NtContinue  (1244308, 0, ...
 01862   676   NtContinue  (1244308, 0, ...
 01863   676   NtContinue  (1244308, 0, ...
 01864   676   NtContinue  (1244308, 0, ...
 01865   676   NtContinue  (1244308, 0, ...
 01866   676   NtContinue  (1244308, 0, ...
 01867   676   NtContinue  (1244308, 0, ...
 01868   676   NtContinue  (1244308, 0, ...
 01869   676   NtContinue  (1244308, 0, ...
 01870   676   NtContinue  (1244308, 0, ...
 01871   676   NtContinue  (1244308, 0, ...
 01872   676   NtContinue  (1244308, 0, ...
 01873   676   NtContinue  (1244308, 0, ...
 01874   676   NtContinue  (1244308, 0, ...
 01875   676   NtContinue  (1244308, 0, ...
 01876   676   NtContinue  (1244308, 0, ...
 01877   676   NtContinue  (1244308, 0, ...
 01878   676   NtContinue  (1244308, 0, ...
 01879   676   NtContinue  (1244308, 0, ...
 01880   676   NtContinue  (1244308, 0, ...
 01881   676   NtContinue  (1244308, 0, ...
 01882   676   NtContinue  (1244308, 0, ...
 01883   676   NtContinue  (1244308, 0, ...
 01884   676   NtContinue  (1244308, 0, ...
 01885   676   NtContinue  (1244308, 0, ...
 01886   676   NtContinue  (1244308, 0, ...
 01887   676   NtContinue  (1244308, 0, ...
 01888   676   NtContinue  (1244308, 0, ...
 01889   676   NtContinue  (1244308, 0, ...
 01890   676   NtContinue  (1244308, 0, ...
 01891   676   NtContinue  (1244308, 0, ...
 01892   676   NtContinue  (1244308, 0, ...
 01893   676   NtContinue  (1244308, 0, ...
 01894   676   NtContinue  (1244308, 0, ...
 01895   676   NtContinue  (1244308, 0, ...
 01896   676   NtContinue  (1244308, 0, ...
 01897   676   NtContinue  (1244308, 0, ...
 01898   676   NtContinue  (1244308, 0, ...
 01899   676   NtContinue  (1244308, 0, ...
 01900   676   NtContinue  (1244308, 0, ...
 01901   676   NtContinue  (1244308, 0, ...
 01902   676   NtContinue  (1244308, 0, ...
 01903   676   NtContinue  (1244308, 0, ...
 01904   676   NtContinue  (1244308, 0, ...
 01905   676   NtContinue  (1244308, 0, ...
 01906   676   NtContinue  (1244308, 0, ...
 01907   676   NtContinue  (1244308, 0, ...
 01908   676   NtContinue  (1244308, 0, ...
 01909   676   NtContinue  (1244308, 0, ...
 01910   676   NtContinue  (1244308, 0, ...
 01911   676   NtContinue  (1244308, 0, ...
 01912   676   NtContinue  (1244308, 0, ...
 01913   676   NtContinue  (1244308, 0, ...
 01914   676   NtContinue  (1244308, 0, ...
 01915   676   NtContinue  (1244308, 0, ...
 01916   676   NtContinue  (1244308, 0, ...
 01917   676   NtContinue  (1244308, 0, ...
 01918   676   NtContinue  (1244308, 0, ...
 01919   676   NtContinue  (1244308, 0, ...
 01920   676   NtContinue  (1244308, 0, ...
 01921   676   NtContinue  (1244308, 0, ...
 01922   676   NtContinue  (1244308, 0, ...
 01923   676   NtContinue  (1244308, 0, ...
 01924   676   NtContinue  (1244308, 0, ...
 01925   676   NtContinue  (1244308, 0, ...
 01926   676   NtContinue  (1244308, 0, ...
 01927   676   NtContinue  (1244308, 0, ...
 01928   676   NtContinue  (1244308, 0, ...
 01929   676   NtContinue  (1244308, 0, ...
 01930   676   NtContinue  (1244308, 0, ...
 01931   676   NtContinue  (1244308, 0, ...
 01932   676   NtContinue  (1244308, 0, ...
 01933   676   NtContinue  (1244308, 0, ...
 01934   676   NtContinue  (1244308, 0, ...
 01935   676   NtContinue  (1244308, 0, ...
 01936   676   NtContinue  (1244308, 0, ...
 01937   676   NtContinue  (1244308, 0, ...
 01938   676   NtContinue  (1244308, 0, ...
 01939   676   NtContinue  (1244308, 0, ...
 01940   676   NtContinue  (1244308, 0, ...
 01941   676   NtContinue  (1244308, 0, ...
 01942   676   NtContinue  (1244308, 0, ...
 01943   676   NtContinue  (1244308, 0, ...
 01944   676   NtContinue  (1244308, 0, ...
 01945   676   NtContinue  (1244308, 0, ...
 01946   676   NtContinue  (1244308, 0, ...
 01947   676   NtContinue  (1244308, 0, ...
 01948   676   NtContinue  (1244308, 0, ...
 01949   676   NtContinue  (1244308, 0, ...
 01950   676   NtContinue  (1244308, 0, ...
 01951   676   NtContinue  (1244308, 0, ...
 01952   676   NtContinue  (1244308, 0, ...
 01953   676   NtContinue  (1244308, 0, ...
 01954   676   NtContinue  (1244308, 0, ...
 01955   676   NtContinue  (1244308, 0, ...
 01956   676   NtContinue  (1244308, 0, ...
 01957   676   NtContinue  (1244308, 0, ...
 01958   676   NtContinue  (1244308, 0, ...
 01959   676   NtContinue  (1244308, 0, ...
 01960   676   NtContinue  (1244308, 0, ...
 01961   676   NtContinue  (1244308, 0, ...
 01962   676   NtContinue  (1244308, 0, ...
 01963   676   NtContinue  (1244308, 0, ...
 01964   676   NtContinue  (1244308, 0, ...
 01965   676   NtContinue  (1244308, 0, ...
 01966   676   NtContinue  (1244308, 0, ...
 01967   676   NtContinue  (1244308, 0, ...
 01968   676   NtContinue  (1244308, 0, ...
 01969   676   NtContinue  (1244308, 0, ...
 01970   676   NtContinue  (1244308, 0, ...
 01971   676   NtContinue  (1244308, 0, ...
 01972   676   NtContinue  (1244308, 0, ...
 01973   676   NtContinue  (1244308, 0, ...
 01974   676   NtContinue  (1244308, 0, ...
 01975   676   NtContinue  (1244308, 0, ...
 01976   676   NtContinue  (1244308, 0, ...
 01977   676   NtContinue  (1244308, 0, ...
 01978   676   NtContinue  (1244308, 0, ...
 01979   676   NtContinue  (1244308, 0, ...
 01980   676   NtContinue  (1244308, 0, ...
 01981   676   NtContinue  (1244308, 0, ...
 01982   676   NtContinue  (1244308, 0, ...
 01983   676   NtContinue  (1244308, 0, ...
 01984   676   NtContinue  (1244308, 0, ...
 01985   676   NtContinue  (1244308, 0, ...
 01986   676   NtContinue  (1244308, 0, ...
 01987   676   NtContinue  (1244308, 0, ...
 01988   676   NtContinue  (1244308, 0, ...
 01989   676   NtContinue  (1244308, 0, ...
 01990   676   NtContinue  (1244308, 0, ...
 01991   676   NtContinue  (1244308, 0, ...
 01992   676   NtContinue  (1244308, 0, ...
 01993   676   NtContinue  (1244308, 0, ...
 01994   676   NtContinue  (1244308, 0, ...
 01995   676   NtContinue  (1244308, 0, ...
 01996   676   NtContinue  (1244308, 0, ...
 01997   676   NtContinue  (1244308, 0, ...
 01998   676   NtContinue  (1244308, 0, ...
 01999   676   NtContinue  (1244308, 0, ...
 02000   676   NtContinue  (1244308, 0, ...
 02001   676   NtContinue  (1244308, 0, ...
 02002   676   NtContinue  (1244308, 0, ...
 02003   676   NtContinue  (1244308, 0, ...
 02004   676   NtContinue  (1244308, 0, ...
 02005   676   NtContinue  (1244308, 0, ...
 02006   676   NtContinue  (1244308, 0, ...
 02007   676   NtContinue  (1244308, 0, ...
 02008   676   NtContinue  (1244308, 0, ...
 02009   676   NtContinue  (1244308, 0, ...
 02010   676   NtContinue  (1244308, 0, ...
 02011   676   NtContinue  (1244308, 0, ...
 02012   676   NtContinue  (1244308, 0, ...
 02013   676   NtContinue  (1244308, 0, ...
 02014   676   NtContinue  (1244308, 0, ...
 02015   676   NtContinue  (1244308, 0, ...
 02016   676   NtContinue  (1244308, 0, ...
 02017   676   NtContinue  (1244308, 0, ...
 02018   676   NtContinue  (1244308, 0, ...
 02019   676   NtContinue  (1244308, 0, ...
 02020   676   NtContinue  (1244308, 0, ...
 02021   676   NtContinue  (1244308, 0, ...
 02022   676   NtContinue  (1244308, 0, ...
 02023   676   NtContinue  (1244308, 0, ...
 02024   676   NtContinue  (1244308, 0, ...
 02025   676   NtContinue  (1244308, 0, ...
 02026   676   NtContinue  (1244308, 0, ...
 02027   676   NtContinue  (1244308, 0, ...
 02028   676   NtContinue  (1244308, 0, ...
 02029   676   NtContinue  (1244308, 0, ...
 02030   676   NtContinue  (1244308, 0, ...
 02031   676   NtContinue  (1244308, 0, ...
 02032   676   NtContinue  (1244308, 0, ...
 02033   676   NtContinue  (1244308, 0, ...
 02034   676   NtContinue  (1244308, 0, ...
 02035   676   NtContinue  (1244308, 0, ...
 02036   676   NtContinue  (1244308, 0, ...
 02037   676   NtContinue  (1244308, 0, ...
 02038   676   NtContinue  (1244308, 0, ...
 02039   676   NtContinue  (1244308, 0, ...
 02040   676   NtContinue  (1244308, 0, ...
 02041   676   NtContinue  (1244308, 0, ...
 02042   676   NtContinue  (1244308, 0, ...
 02043   676   NtContinue  (1244308, 0, ...
 02044   676   NtContinue  (1244308, 0, ...
 02045   676   NtContinue  (1244308, 0, ...
 02046   676   NtContinue  (1244308, 0, ...
 02047   676   NtContinue  (1244308, 0, ...
 02048   676   NtContinue  (1244308, 0, ...
 02049   676   NtContinue  (1244308, 0, ...
 02050   676   NtContinue  (1244308, 0, ...
 02051   676   NtContinue  (1244308, 0, ...
 02052   676   NtContinue  (1244308, 0, ...
 02053   676   NtContinue  (1244308, 0, ...
 02054   676   NtContinue  (1244308, 0, ...
 02055   676   NtContinue  (1244308, 0, ...
 02056   676   NtContinue  (1244308, 0, ...
 02057   676   NtContinue  (1244308, 0, ...
 02058   676   NtContinue  (1244308, 0, ...
 02059   676   NtContinue  (1244308, 0, ...
 02060   676   NtContinue  (1244308, 0, ...
 02061   676   NtContinue  (1244308, 0, ...
 02062   676   NtContinue  (1244308, 0, ...
 02063   676   NtContinue  (1244308, 0, ...
 02064   676   NtContinue  (1244308, 0, ...
 02065   676   NtContinue  (1244308, 0, ...
 02066   676   NtContinue  (1244308, 0, ...
 02067   676   NtContinue  (1244308, 0, ...
 02068   676   NtContinue  (1244308, 0, ...
 02069   676   NtContinue  (1244308, 0, ...
 02070   676   NtContinue  (1244308, 0, ...
 02071   676   NtContinue  (1244308, 0, ...
 02072   676   NtContinue  (1244308, 0, ...
 02073   676   NtContinue  (1244308, 0, ...
 02074   676   NtContinue  (1244308, 0, ...
 02075   676   NtContinue  (1244308, 0, ...
 02076   676   NtContinue  (1244308, 0, ...
 02077   676   NtContinue  (1244308, 0, ...
 02078   676   NtContinue  (1244308, 0, ...
 02079   676   NtContinue  (1244308, 0, ...
 02080   676   NtContinue  (1244308, 0, ...
 02081   676   NtContinue  (1244308, 0, ...
 02082   676   NtContinue  (1244308, 0, ...
 02083   676   NtContinue  (1244308, 0, ...
 02084   676   NtContinue  (1244308, 0, ...
 02085   676   NtContinue  (1244308, 0, ...
 02086   676   NtContinue  (1244308, 0, ...
 02087   676   NtContinue  (1244308, 0, ...
 02088   676   NtContinue  (1244308, 0, ...
 02089   676   NtContinue  (1244308, 0, ...
 02090   676   NtContinue  (1244308, 0, ...
 02091   676   NtContinue  (1244308, 0, ...
 02092   676   NtContinue  (1244308, 0, ...
 02093   676   NtContinue  (1244308, 0, ...
 02094   676   NtContinue  (1244308, 0, ...
 02095   676   NtContinue  (1244308, 0, ...
 02096   676   NtContinue  (1244308, 0, ...
 02097   676   NtContinue  (1244308, 0, ...
 02098   676   NtContinue  (1244308, 0, ...
 02099   676   NtContinue  (1244308, 0, ...
 02100   676   NtContinue  (1244308, 0, ...
 02101   676   NtContinue  (1244308, 0, ...
 02102   676   NtContinue  (1244308, 0, ...
 02103   676   NtContinue  (1244308, 0, ...
 02104   676   NtContinue  (1244308, 0, ...
 02105   676   NtContinue  (1244308, 0, ...
 02106   676   NtContinue  (1244308, 0, ...
 02107   676   NtContinue  (1244308, 0, ...
 02108   676   NtContinue  (1244308, 0, ...
 02109   676   NtContinue  (1244308, 0, ...
 02110   676   NtContinue  (1244308, 0, ...
 02111   676   NtContinue  (1244308, 0, ...
 02112   676   NtContinue  (1244308, 0, ...
 02113   676   NtContinue  (1244308, 0, ...
 02114   676   NtContinue  (1244308, 0, ...
 02115   676   NtContinue  (1244308, 0, ...
 02116   676   NtContinue  (1244308, 0, ...
 02117   676   NtContinue  (1244308, 0, ...
 02118   676   NtContinue  (1244308, 0, ...
 02119   676   NtContinue  (1244308, 0, ...
 02120   676   NtContinue  (1244308, 0, ...
 02121   676   NtContinue  (1244308, 0, ...
 02122   676   NtContinue  (1244308, 0, ...
 02123   676   NtContinue  (1244308, 0, ...
 02124   676   NtContinue  (1244308, 0, ...
 02125   676   NtContinue  (1244308, 0, ...
 02126   676   NtContinue  (1244308, 0, ...
 02127   676   NtContinue  (1244308, 0, ...
 02128   676   NtContinue  (1244308, 0, ...
 02129   676   NtContinue  (1244308, 0, ...
 02130   676   NtContinue  (1244308, 0, ...
 02131   676   NtContinue  (1244308, 0, ...
 02132   676   NtContinue  (1244308, 0, ...
 02133   676   NtContinue  (1244308, 0, ...
 02134   676   NtContinue  (1244308, 0, ...
 02135   676   NtContinue  (1244308, 0, ...
 02136   676   NtContinue  (1244308, 0, ...
 02137   676   NtContinue  (1244308, 0, ...
 02138   676   NtContinue  (1244308, 0, ...
 02139   676   NtContinue  (1244308, 0, ...
 02140   676   NtContinue  (1244308, 0, ...
 02141   676   NtContinue  (1244308, 0, ...
 02142   676   NtContinue  (1244308, 0, ...
 02143   676   NtContinue  (1244308, 0, ...
 02144   676   NtContinue  (1244308, 0, ...
 02145   676   NtContinue  (1244308, 0, ...
 02146   676   NtContinue  (1244308, 0, ...
 02147   676   NtContinue  (1244308, 0, ...
 02148   676   NtContinue  (1244308, 0, ...
 02149   676   NtContinue  (1244308, 0, ...
 02150   676   NtContinue  (1244308, 0, ...
 02151   676   NtContinue  (1244308, 0, ...
 02152   676   NtContinue  (1244308, 0, ...
 02153   676   NtContinue  (1244308, 0, ...
 02154   676   NtContinue  (1244308, 0, ...
 02155   676   NtContinue  (1244308, 0, ...
 02156   676   NtContinue  (1244308, 0, ...
 02157   676   NtContinue  (1244308, 0, ...
 02158   676   NtContinue  (1244308, 0, ...
 02159   676   NtContinue  (1244308, 0, ...
 02160   676   NtContinue  (1244308, 0, ...
 02161   676   NtContinue  (1244308, 0, ...
 02162   676   NtContinue  (1244308, 0, ...
 02163   676   NtContinue  (1244308, 0, ...
 02164   676   NtContinue  (1244308, 0, ...
 02165   676   NtContinue  (1244308, 0, ...
 02166   676   NtContinue  (1244308, 0, ...
 02167   676   NtContinue  (1244308, 0, ...
 02168   676   NtContinue  (1244308, 0, ...
 02169   676   NtContinue  (1244308, 0, ...
 02170   676   NtContinue  (1244308, 0, ...
 02171   676   NtContinue  (1244308, 0, ...
 02172   676   NtContinue  (1244308, 0, ...
 02173   676   NtContinue  (1244308, 0, ...
 02174   676   NtContinue  (1244308, 0, ...
 02175   676   NtContinue  (1244308, 0, ...
 02176   676   NtContinue  (1244308, 0, ...
 02177   676   NtContinue  (1244308, 0, ...
 02178   676   NtContinue  (1244308, 0, ...
 02179   676   NtContinue  (1244308, 0, ...
 02180   676   NtContinue  (1244308, 0, ...
 02181   676   NtContinue  (1244308, 0, ...
 02182   676   NtContinue  (1244308, 0, ...
 02183   676   NtContinue  (1244308, 0, ...
 02184   676   NtContinue  (1244308, 0, ...
 02185   676   NtContinue  (1244308, 0, ...
 02186   676   NtContinue  (1244308, 0, ...
 02187   676   NtContinue  (1244308, 0, ...
 02188   676   NtContinue  (1244308, 0, ...
 02189   676   NtContinue  (1244308, 0, ...
 02190   676   NtContinue  (1244308, 0, ...
 02191   676   NtContinue  (1244308, 0, ...
 02192   676   NtContinue  (1244308, 0, ...
 02193   676   NtContinue  (1244308, 0, ...
 02194   676   NtContinue  (1244308, 0, ...
 02195   676   NtContinue  (1244308, 0, ...
 02196   676   NtContinue  (1244308, 0, ...
 02197   676   NtContinue  (1244308, 0, ...
 02198   676   NtContinue  (1244308, 0, ...
 02199   676   NtContinue  (1244308, 0, ...
 02200   676   NtContinue  (1244308, 0, ...
 02201   676   NtContinue  (1244308, 0, ...
 02202   676   NtContinue  (1244308, 0, ...
 02203   676   NtContinue  (1244308, 0, ...
 02204   676   NtContinue  (1244308, 0, ...
 02205   676   NtContinue  (1244308, 0, ...
 02206   676   NtContinue  (1244308, 0, ...
 02207   676   NtContinue  (1244308, 0, ...
 02208   676   NtContinue  (1244308, 0, ...
 02209   676   NtContinue  (1244308, 0, ...
 02210   676   NtContinue  (1244308, 0, ...
 02211   676   NtContinue  (1244308, 0, ...
 02212   676   NtContinue  (1244308, 0, ...
 02213   676   NtContinue  (1244308, 0, ...
 02214   676   NtContinue  (1244308, 0, ...
 02215   676   NtContinue  (1244308, 0, ...
 02216   676   NtContinue  (1244308, 0, ...
 02217   676   NtContinue  (1244308, 0, ...
 02218   676   NtContinue  (1244308, 0, ...
 02219   676   NtContinue  (1244308, 0, ...
 02220   676   NtContinue  (1244308, 0, ...
 02221   676   NtContinue  (1244308, 0, ...
 02222   676   NtContinue  (1244308, 0, ...
 02223   676   NtContinue  (1244308, 0, ...
 02224   676   NtContinue  (1244308, 0, ...
 02225   676   NtContinue  (1244308, 0, ...
 02226   676   NtContinue  (1244308, 0, ...
 02227   676   NtContinue  (1244308, 0, ...
 02228   676   NtContinue  (1244308, 0, ...
 02229   676   NtContinue  (1244308, 0, ...
 02230   676   NtContinue  (1244308, 0, ...
 02231   676   NtContinue  (1244308, 0, ...
 02232   676   NtContinue  (1244308, 0, ...
 02233   676   NtContinue  (1244308, 0, ...
 02234   676   NtContinue  (1244308, 0, ...
 02235   676   NtContinue  (1244308, 0, ...
 02236   676   NtContinue  (1244308, 0, ...
 02237   676   NtContinue  (1244308, 0, ...
 02238   676   NtContinue  (1244308, 0, ...
 02239   676   NtContinue  (1244308, 0, ...
 02240   676   NtContinue  (1244308, 0, ...
 02241   676   NtContinue  (1244308, 0, ...
 02242   676   NtContinue  (1244308, 0, ...
 02243   676   NtContinue  (1244308, 0, ...
 02244   676   NtContinue  (1244308, 0, ...
 02245   676   NtContinue  (1244308, 0, ...
 02246   676   NtContinue  (1244308, 0, ...
 02247   676   NtContinue  (1244308, 0, ...
 02248   676   NtContinue  (1244308, 0, ...
 02249   676   NtContinue  (1244308, 0, ...
 02250   676   NtContinue  (1244308, 0, ...
 02251   676   NtContinue  (1244308, 0, ...
 02252   676   NtContinue  (1244308, 0, ...
 02253   676   NtContinue  (1244308, 0, ...
 02254   676   NtContinue  (1244308, 0, ...
 02255   676   NtContinue  (1244308, 0, ...
 02256   676   NtContinue  (1244308, 0, ...
 02257   676   NtContinue  (1244308, 0, ...
 02258   676   NtContinue  (1244308, 0, ...
 02259   676   NtContinue  (1244308, 0, ...
 02260   676   NtContinue  (1244308, 0, ...
 02261   676   NtContinue  (1244308, 0, ...
 02262   676   NtContinue  (1244308, 0, ...
 02263   676   NtContinue  (1244308, 0, ...
 02264   676   NtContinue  (1244308, 0, ...
 02265   676   NtContinue  (1244308, 0, ...
 02266   676   NtContinue  (1244308, 0, ...
 02267   676   NtContinue  (1244308, 0, ...
 02268   676   NtContinue  (1244308, 0, ...
 02269   676   NtContinue  (1244308, 0, ...
 02270   676   NtContinue  (1244308, 0, ...
 02271   676   NtContinue  (1244308, 0, ...
 02272   676   NtContinue  (1244308, 0, ...
 02273   676   NtContinue  (1244308, 0, ...
 02274   676   NtContinue  (1244308, 0, ...
 02275   676   NtContinue  (1244308, 0, ...
 02276   676   NtContinue  (1244308, 0, ...
 02277   676   NtContinue  (1244308, 0, ...
 02278   676   NtContinue  (1244308, 0, ...
 02279   676   NtContinue  (1244308, 0, ...
 02280   676   NtContinue  (1244308, 0, ...
 02281   676   NtContinue  (1244308, 0, ...
 02282   676   NtContinue  (1244308, 0, ...
 02283   676   NtContinue  (1244308, 0, ...
 02284   676   NtContinue  (1244308, 0, ...
 02285   676   NtContinue  (1244308, 0, ...
 02286   676   NtContinue  (1244308, 0, ...
 02287   676   NtContinue  (1244308, 0, ...
 02288   676   NtContinue  (1244308, 0, ...
 02289   676   NtContinue  (1244308, 0, ...
 02290   676   NtContinue  (1244308, 0, ...
 02291   676   NtContinue  (1244308, 0, ...
 02292   676   NtContinue  (1244308, 0, ...
 02293   676   NtContinue  (1244308, 0, ...
 02294   676   NtContinue  (1244308, 0, ...
 02295   676   NtContinue  (1244308, 0, ...
 02296   676   NtContinue  (1244308, 0, ...
 02297   676   NtContinue  (1244308, 0, ...
 02298   676   NtContinue  (1244308, 0, ...
 02299   676   NtContinue  (1244308, 0, ...
 02300   676   NtContinue  (1244308, 0, ...
 02301   676   NtContinue  (1244308, 0, ...
 02302   676   NtContinue  (1244308, 0, ...
 02303   676   NtContinue  (1244308, 0, ...
 02304   676   NtContinue  (1244308, 0, ...
 02305   676   NtContinue  (1244308, 0, ...
 02306   676   NtContinue  (1244308, 0, ...
 02307   676   NtContinue  (1244308, 0, ...
 02308   676   NtContinue  (1244308, 0, ...
 02309   676   NtContinue  (1244308, 0, ...
 02310   676   NtContinue  (1244308, 0, ...
 02311   676   NtContinue  (1244308, 0, ...
 02312   676   NtContinue  (1244308, 0, ...
 02313   676   NtContinue  (1244308, 0, ...
 02314   676   NtContinue  (1244308, 0, ...
 02315   676   NtContinue  (1244308, 0, ...
 02316   676   NtContinue  (1244308, 0, ...
 02317   676   NtContinue  (1244308, 0, ...
 02318   676   NtContinue  (1244308, 0, ...
 02319   676   NtContinue  (1244308, 0, ...
 02320   676   NtContinue  (1244308, 0, ...
 02321   676   NtContinue  (1244308, 0, ...
 02322   676   NtContinue  (1244308, 0, ...
 02323   676   NtContinue  (1244308, 0, ...
 02324   676   NtContinue  (1244308, 0, ...
 02325   676   NtContinue  (1244308, 0, ...
 02326   676   NtContinue  (1244308, 0, ...
 02327   676   NtContinue  (1244308, 0, ...
 02328   676   NtContinue  (1244308, 0, ...
 02329   676   NtContinue  (1244308, 0, ...
 02330   676   NtContinue  (1244308, 0, ...
 02331   676   NtContinue  (1244308, 0, ...
 02332   676   NtContinue  (1244308, 0, ...
 02333   676   NtContinue  (1244308, 0, ...
 02334   676   NtContinue  (1244308, 0, ...
 02335   676   NtContinue  (1244308, 0, ...
 02336   676   NtContinue  (1244308, 0, ...
 02337   676   NtContinue  (1244308, 0, ...
 02338   676   NtContinue  (1244308, 0, ...
 02339   676   NtContinue  (1244308, 0, ...
 02340   676   NtContinue  (1244308, 0, ...
 02341   676   NtContinue  (1244308, 0, ...
 02342   676   NtContinue  (1244308, 0, ...
 02343   676   NtContinue  (1244308, 0, ...
 02344   676   NtContinue  (1244308, 0, ...
 02345   676   NtContinue  (1244308, 0, ...
 02346   676   NtContinue  (1244308, 0, ...
 02347   676   NtContinue  (1244308, 0, ...
 02348   676   NtContinue  (1244308, 0, ...
 02349   676   NtContinue  (1244308, 0, ...
 02350   676   NtContinue  (1244308, 0, ...
 02351   676   NtContinue  (1244308, 0, ...
 02352   676   NtContinue  (1244308, 0, ...
 02353   676   NtContinue  (1244308, 0, ...
 02354   676   NtContinue  (1244308, 0, ...
 02355   676   NtContinue  (1244308, 0, ...
 02356   676   NtContinue  (1244308, 0, ...
 02357   676   NtContinue  (1244308, 0, ...
 02358   676   NtContinue  (1244308, 0, ...
 02359   676   NtContinue  (1244308, 0, ...
 02360   676   NtContinue  (1244308, 0, ...
 02361   676   NtContinue  (1244308, 0, ...
 02362   676   NtContinue  (1244308, 0, ...
 02363   676   NtContinue  (1244308, 0, ...
 02364   676   NtContinue  (1244308, 0, ...
 02365   676   NtContinue  (1244308, 0, ...
 02366   676   NtContinue  (1244308, 0, ...
 02367   676   NtContinue  (1244308, 0, ...
 02368   676   NtContinue  (1244308, 0, ...
 02369   676   NtContinue  (1244308, 0, ...
 02370   676   NtContinue  (1244308, 0, ...
 02371   676   NtContinue  (1244308, 0, ...
 02372   676   NtContinue  (1244308, 0, ...
 02373   676   NtContinue  (1244308, 0, ...
 02374   676   NtContinue  (1244308, 0, ...
 02375   676   NtContinue  (1244308, 0, ...
 02376   676   NtContinue  (1244308, 0, ...
 02377   676   NtContinue  (1244308, 0, ...
 02378   676   NtContinue  (1244308, 0, ...
 02379   676   NtContinue  (1244308, 0, ...
 02380   676   NtContinue  (1244308, 0, ...
 02381   676   NtContinue  (1244308, 0, ...
 02382   676   NtContinue  (1244308, 0, ...
 02383   676   NtContinue  (1244308, 0, ...
 02384   676   NtContinue  (1244308, 0, ...
 02385   676   NtContinue  (1244308, 0, ...
 02386   676   NtContinue  (1244308, 0, ...
 02387   676   NtContinue  (1244308, 0, ...
 02388   676   NtContinue  (1244308, 0, ...
 02389   676   NtContinue  (1244308, 0, ...
 02390   676   NtContinue  (1244308, 0, ...
 02391   676   NtContinue  (1244308, 0, ...
 02392   676   NtContinue  (1244308, 0, ...
 02393   676   NtContinue  (1244308, 0, ...
 02394   676   NtContinue  (1244308, 0, ...
 02395   676   NtContinue  (1244308, 0, ...
 02396   676   NtContinue  (1244308, 0, ...
 02397   676   NtContinue  (1244308, 0, ...
 02398   676   NtContinue  (1244308, 0, ...
 02399   676   NtContinue  (1244308, 0, ...
 02400   676   NtContinue  (1244308, 0, ...
 02401   676   NtContinue  (1244308, 0, ...
 02402   676   NtContinue  (1244308, 0, ...
 02403   676   NtContinue  (1244308, 0, ...
 02404   676   NtContinue  (1244308, 0, ...
 02405   676   NtContinue  (1244308, 0, ...
 02406   676   NtContinue  (1244308, 0, ...
 02407   676   NtContinue  (1244308, 0, ...
 02408   676   NtContinue  (1244308, 0, ...
 02409   676   NtContinue  (1244308, 0, ...
 02410   676   NtContinue  (1244308, 0, ...
 02411   676   NtContinue  (1244308, 0, ...
 02412   676   NtContinue  (1244308, 0, ...
 02413   676   NtContinue  (1244308, 0, ...
 02414   676   NtContinue  (1244308, 0, ...
 02415   676   NtContinue  (1244308, 0, ...
 02416   676   NtContinue  (1244308, 0, ...
 02417   676   NtContinue  (1244308, 0, ...
 02418   676   NtContinue  (1244308, 0, ...
 02419   676   NtContinue  (1244308, 0, ...
 02420   676   NtContinue  (1244308, 0, ...
 02421   676   NtContinue  (1244308, 0, ...
 02422   676   NtContinue  (1244308, 0, ...
 02423   676   NtContinue  (1244308, 0, ...
 02424   676   NtContinue  (1244308, 0, ...
 02425   676   NtContinue  (1244308, 0, ...
 02426   676   NtContinue  (1244308, 0, ...
 02427   676   NtContinue  (1244308, 0, ...
 02428   676   NtContinue  (1244308, 0, ...
 02429   676   NtContinue  (1244308, 0, ...
 02430   676   NtContinue  (1244308, 0, ...
 02431   676   NtContinue  (1244308, 0, ...
 02432   676   NtContinue  (1244308, 0, ...
 02433   676   NtContinue  (1244308, 0, ...
 02434   676   NtContinue  (1244308, 0, ...
 02435   676   NtContinue  (1244308, 0, ...
 02436   676   NtContinue  (1244308, 0, ...
 02437   676   NtContinue  (1244308, 0, ...
 02438   676   NtContinue  (1244308, 0, ...
 02439   676   NtContinue  (1244308, 0, ...
 02440   676   NtContinue  (1244308, 0, ...
 02441   676   NtContinue  (1244308, 0, ...
 02442   676   NtContinue  (1244308, 0, ...
 02443   676   NtContinue  (1244308, 0, ...
 02444   676   NtContinue  (1244308, 0, ...
 02445   676   NtContinue  (1244308, 0, ...
 02446   676   NtContinue  (1244308, 0, ...
 02447   676   NtContinue  (1244308, 0, ...
 02448   676   NtContinue  (1244308, 0, ...
 02449   676   NtContinue  (1244308, 0, ...
 02450   676   NtContinue  (1244308, 0, ...
 02451   676   NtContinue  (1244308, 0, ...
 02452   676   NtContinue  (1244308, 0, ...
 02453   676   NtContinue  (1244308, 0, ...
 02454   676   NtContinue  (1244308, 0, ...
 02455   676   NtContinue  (1244308, 0, ...
 02456   676   NtContinue  (1244308, 0, ...
 02457   676   NtContinue  (1244308, 0, ...
 02458   676   NtContinue  (1244308, 0, ...
 02459   676   NtContinue  (1244308, 0, ...
 02460   676   NtContinue  (1244308, 0, ...
 02461   676   NtContinue  (1244308, 0, ...
 02462   676   NtContinue  (1244308, 0, ...
 02463   676   NtContinue  (1244308, 0, ...
 02464   676   NtContinue  (1244308, 0, ...
 02465   676   NtContinue  (1244308, 0, ...
 02466   676   NtContinue  (1244308, 0, ...
 02467   676   NtContinue  (1244308, 0, ...
 02468   676   NtContinue  (1244308, 0, ...
 02469   676   NtContinue  (1244308, 0, ...
 02470   676   NtContinue  (1244308, 0, ...
 02471   676   NtContinue  (1244308, 0, ...
 02472   676   NtContinue  (1244308, 0, ...
 02473   676   NtContinue  (1244308, 0, ...
 02474   676   NtContinue  (1244308, 0, ...
 02475   676   NtContinue  (1244308, 0, ...
 02476   676   NtContinue  (1244308, 0, ...
 02477   676   NtContinue  (1244308, 0, ...
 02478   676   NtContinue  (1244308, 0, ...
 02479   676   NtContinue  (1244308, 0, ...
 02480   676   NtContinue  (1244308, 0, ...
 02481   676   NtContinue  (1244308, 0, ...
 02482   676   NtContinue  (1244308, 0, ...
 02483   676   NtContinue  (1244308, 0, ...
 02484   676   NtContinue  (1244308, 0, ...
 02485   676   NtContinue  (1244308, 0, ...
 02486   676   NtContinue  (1244308, 0, ...
 02487   676   NtContinue  (1244308, 0, ...
 02488   676   NtContinue  (1244308, 0, ...
 02489   676   NtContinue  (1244308, 0, ...
 02490   676   NtContinue  (1244308, 0, ...
 02491   676   NtContinue  (1244308, 0, ...
 02492   676   NtContinue  (1244308, 0, ...
 02493   676   NtContinue  (1244308, 0, ...
 02494   676   NtContinue  (1244308, 0, ...
 02495   676   NtContinue  (1244308, 0, ...
 02496   676   NtContinue  (1244308, 0, ...
 02497   676   NtContinue  (1244308, 0, ...
 02498   676   NtContinue  (1244308, 0, ...
 02499   676   NtContinue  (1244308, 0, ...
 02500   676   NtContinue  (1244308, 0, ...
 02501   676   NtContinue  (1244308, 0, ...
 02502   676   NtContinue  (1244308, 0, ...
 02503   676   NtContinue  (1244308, 0, ...
 02504   676   NtContinue  (1244308, 0, ...
 02505   676   NtContinue  (1244308, 0, ...
 02506   676   NtContinue  (1244308, 0, ...
 02507   676   NtContinue  (1244308, 0, ...
 02508   676   NtContinue  (1244308, 0, ...
 02509   676   NtContinue  (1244308, 0, ...
 02510   676   NtContinue  (1244308, 0, ...
 02511   676   NtContinue  (1244308, 0, ...
 02512   676   NtContinue  (1244308, 0, ...
 02513   676   NtContinue  (1244308, 0, ...
 02514   676   NtContinue  (1244308, 0, ...
 02515   676   NtContinue  (1244308, 0, ...
 02516   676   NtContinue  (1244308, 0, ...
 02517   676   NtContinue  (1244308, 0, ...
 02518   676   NtContinue  (1244308, 0, ...
 02519   676   NtContinue  (1244308, 0, ...
 02520   676   NtContinue  (1244308, 0, ...
 02521   676   NtContinue  (1244308, 0, ...
 02522   676   NtContinue  (1244308, 0, ...
 02523   676   NtContinue  (1244308, 0, ...
 02524   676   NtContinue  (1244308, 0, ...
 02525   676   NtContinue  (1244308, 0, ...
 02526   676   NtContinue  (1244308, 0, ...
 02527   676   NtContinue  (1244308, 0, ...
 02528   676   NtContinue  (1244308, 0, ...
 02529   676   NtContinue  (1244308, 0, ...
 02530   676   NtContinue  (1244308, 0, ...
 02531   676   NtContinue  (1244308, 0, ...
 02532   676   NtContinue  (1244308, 0, ...
 02533   676   NtContinue  (1244308, 0, ...
 02534   676   NtContinue  (1244308, 0, ...
 02535   676   NtContinue  (1244308, 0, ...
 02536   676   NtContinue  (1244308, 0, ...
 02537   676   NtContinue  (1244308, 0, ...
 02538   676   NtContinue  (1244308, 0, ...
 02539   676   NtContinue  (1244308, 0, ...
 02540   676   NtContinue  (1244308, 0, ...
 02541   676   NtContinue  (1244308, 0, ...
 02542   676   NtContinue  (1244308, 0, ...
 02543   676   NtContinue  (1244308, 0, ...
 02544   676   NtContinue  (1244308, 0, ...
 02545   676   NtContinue  (1244308, 0, ...
 02546   676   NtContinue  (1244308, 0, ...
 02547   676   NtContinue  (1244308, 0, ...
 02548   676   NtContinue  (1244308, 0, ...
 02549   676   NtContinue  (1244308, 0, ...
 02550   676   NtContinue  (1244308, 0, ...
 02551   676   NtContinue  (1244308, 0, ...
 02552   676   NtContinue  (1244308, 0, ...
 02553   676   NtContinue  (1244308, 0, ...
 02554   676   NtContinue  (1244308, 0, ...
 02555   676   NtContinue  (1244308, 0, ...
 02556   676   NtContinue  (1244308, 0, ...
 02557   676   NtContinue  (1244308, 0, ...
 02558   676   NtContinue  (1244308, 0, ...
 02559   676   NtContinue  (1244308, 0, ...
 02560   676   NtContinue  (1244308, 0, ...
 02561   676   NtContinue  (1244308, 0, ...
 02562   676   NtContinue  (1244308, 0, ...
 02563   676   NtContinue  (1244308, 0, ...
 02564   676   NtContinue  (1244308, 0, ...
 02565   676   NtContinue  (1244308, 0, ...
 02566   676   NtContinue  (1244308, 0, ...
 02567   676   NtContinue  (1244308, 0, ...
 02568   676   NtContinue  (1244308, 0, ...
 02569   676   NtContinue  (1244308, 0, ...
 02570   676   NtContinue  (1244308, 0, ...
 02571   676   NtContinue  (1244308, 0, ...
 02572   676   NtContinue  (1244308, 0, ...
 02573   676   NtContinue  (1244308, 0, ...
 02574   676   NtContinue  (1244308, 0, ...
 02575   676   NtContinue  (1244308, 0, ...
 02576   676   NtContinue  (1244308, 0, ...
 02577   676   NtContinue  (1244308, 0, ...
 02578   676   NtContinue  (1244308, 0, ...
 02579   676   NtContinue  (1244308, 0, ...
 02580   676   NtContinue  (1244308, 0, ...
 02581   676   NtContinue  (1244308, 0, ...
 02582   676   NtContinue  (1244308, 0, ...
 02583   676   NtContinue  (1244308, 0, ...
 02584   676   NtContinue  (1244308, 0, ...
 02585   676   NtContinue  (1244308, 0, ...
 02586   676   NtContinue  (1244308, 0, ...
 02587   676   NtContinue  (1244308, 0, ...
 02588   676   NtContinue  (1244308, 0, ...
 02589   676   NtContinue  (1244308, 0, ...
 02590   676   NtContinue  (1244308, 0, ...
 02591   676   NtContinue  (1244308, 0, ...
 02592   676   NtContinue  (1244308, 0, ...
 02593   676   NtContinue  (1244308, 0, ...
 02594   676   NtContinue  (1244308, 0, ...
 02595   676   NtContinue  (1244308, 0, ...
 02596   676   NtContinue  (1244308, 0, ...
 02597   676   NtContinue  (1244308, 0, ...
 02598   676   NtContinue  (1244308, 0, ...
 02599   676   NtContinue  (1244308, 0, ...
 02600   676   NtContinue  (1244308, 0, ...
 02601   676   NtContinue  (1244308, 0, ...
 02602   676   NtContinue  (1244308, 0, ...
 02603   676   NtContinue  (1244308, 0, ...
 02604   676   NtContinue  (1244308, 0, ...
 02605   676   NtContinue  (1244308, 0, ...
 02606   676   NtContinue  (1244308, 0, ...
 02607   676   NtContinue  (1244308, 0, ...
 02608   676   NtContinue  (1244308, 0, ...
 02609   676   NtContinue  (1244308, 0, ...
 02610   676   NtContinue  (1244308, 0, ...
 02611   676   NtContinue  (1244308, 0, ...
 02612   676   NtContinue  (1244308, 0, ...
 02613   676   NtContinue  (1244308, 0, ...
 02614   676   NtContinue  (1244308, 0, ...
 02615   676   NtContinue  (1244308, 0, ...
 02616   676   NtContinue  (1244308, 0, ...
 02617   676   NtContinue  (1244308, 0, ...
 02618   676   NtContinue  (1244308, 0, ...
 02619   676   NtContinue  (1244308, 0, ...
 02620   676   NtContinue  (1244308, 0, ...
 02621   676   NtContinue  (1244308, 0, ...
 02622   676   NtContinue  (1244308, 0, ...
 02623   676   NtContinue  (1244308, 0, ...
 02624   676   NtContinue  (1244308, 0, ...
 02625   676   NtContinue  (1244308, 0, ...
 02626   676   NtContinue  (1244308, 0, ...
 02627   676   NtContinue  (1244308, 0, ...
 02628   676   NtContinue  (1244308, 0, ...
 02629   676   NtContinue  (1244308, 0, ...
 02630   676   NtContinue  (1244308, 0, ...
 02631   676   NtContinue  (1244308, 0, ...
 02632   676   NtContinue  (1244308, 0, ...
 02633   676   NtContinue  (1244308, 0, ...
 02634   676   NtContinue  (1244308, 0, ...
 02635   676   NtContinue  (1244308, 0, ...
 02636   676   NtContinue  (1244308, 0, ...
 02637   676   NtContinue  (1244308, 0, ...
 02638   676   NtContinue  (1244308, 0, ...
 02639   676   NtContinue  (1244308, 0, ...
 02640   676   NtContinue  (1244308, 0, ...
 02641   676   NtContinue  (1244308, 0, ...
 02642   676   NtContinue  (1244308, 0, ...
 02643   676   NtContinue  (1244308, 0, ...
 02644   676   NtContinue  (1244308, 0, ...
 02645   676   NtContinue  (1244308, 0, ...
 02646   676   NtContinue  (1244308, 0, ...
 02647   676   NtContinue  (1244308, 0, ...
 02648   676   NtContinue  (1244308, 0, ...
 02649   676   NtContinue  (1244308, 0, ...
 02650   676   NtContinue  (1244308, 0, ...
 02651   676   NtContinue  (1244308, 0, ...
 02652   676   NtContinue  (1244308, 0, ...
 02653   676   NtContinue  (1244308, 0, ...
 02654   676   NtContinue  (1244308, 0, ...
 02655   676   NtContinue  (1244308, 0, ...
 02656   676   NtContinue  (1244308, 0, ...
 02657   676   NtContinue  (1244308, 0, ...
 02658   676   NtContinue  (1244308, 0, ...
 02659   676   NtContinue  (1244308, 0, ...
 02660   676   NtContinue  (1244308, 0, ...
 02661   676   NtContinue  (1244308, 0, ...
 02662   676   NtContinue  (1244308, 0, ...
 02663   676   NtContinue  (1244308, 0, ...
 02664   676   NtContinue  (1244308, 0, ...
 02665   676   NtContinue  (1244308, 0, ...
 02666   676   NtContinue  (1244308, 0, ...
 02667   676   NtContinue  (1244308, 0, ...
 02668   676   NtContinue  (1244308, 0, ...
 02669   676   NtContinue  (1244308, 0, ...
 02670   676   NtContinue  (1244308, 0, ...
 02671   676   NtContinue  (1244308, 0, ...
 02672   676   NtContinue  (1244308, 0, ...
 02673   676   NtContinue  (1244308, 0, ...
 02674   676   NtContinue  (1244308, 0, ...
 02675   676   NtContinue  (1244308, 0, ...
 02676   676   NtContinue  (1244308, 0, ...
 02677   676   NtContinue  (1244308, 0, ...
 02678   676   NtContinue  (1244308, 0, ...
 02679   676   NtContinue  (1244308, 0, ...
 02680   676   NtContinue  (1244308, 0, ...
 02681   676   NtContinue  (1244308, 0, ...
 02682   676   NtContinue  (1244308, 0, ...
 02683   676   NtContinue  (1244308, 0, ...
 02684   676   NtContinue  (1244308, 0, ...
 02685   676   NtContinue  (1244308, 0, ...
 02686   676   NtContinue  (1244308, 0, ...
 02687   676   NtContinue  (1244308, 0, ...
 02688   676   NtContinue  (1244308, 0, ...
 02689   676   NtContinue  (1244308, 0, ...
 02690   676   NtContinue  (1244308, 0, ...
 02691   676   NtContinue  (1244308, 0, ...
 02692   676   NtContinue  (1244308, 0, ...
 02693   676   NtContinue  (1244308, 0, ...
 02694   676   NtContinue  (1244308, 0, ...
 02695   676   NtContinue  (1244308, 0, ...
 02696   676   NtContinue  (1244308, 0, ...
 02697   676   NtContinue  (1244308, 0, ...
 02698   676   NtContinue  (1244308, 0, ...
 02699   676   NtContinue  (1244308, 0, ...
 02700   676   NtContinue  (1244308, 0, ...
 02701   676   NtContinue  (1244308, 0, ...
 02702   676   NtContinue  (1244308, 0, ...
 02703   676   NtContinue  (1244308, 0, ...
 02704   676   NtContinue  (1244308, 0, ...
 02705   676   NtContinue  (1244308, 0, ...
 02706   676   NtContinue  (1244308, 0, ...
 02707   676   NtContinue  (1244308, 0, ...
 02708   676   NtContinue  (1244308, 0, ...
 02709   676   NtContinue  (1244308, 0, ...
 02710   676   NtContinue  (1244308, 0, ...
 02711   676   NtContinue  (1244308, 0, ...
 02712   676   NtContinue  (1244308, 0, ...
 02713   676   NtContinue  (1244308, 0, ...
 02714   676   NtContinue  (1244308, 0, ...
 02715   676   NtContinue  (1244308, 0, ...
 02716   676   NtContinue  (1244308, 0, ...
 02717   676   NtContinue  (1244308, 0, ...
 02718   676   NtContinue  (1244308, 0, ...
 02719   676   NtContinue  (1244308, 0, ...
 02720   676   NtContinue  (1244308, 0, ...
 02721   676   NtContinue  (1244308, 0, ...
 02722   676   NtContinue  (1244308, 0, ...
 02723   676   NtContinue  (1244308, 0, ...
 02724   676   NtContinue  (1244308, 0, ...
 02725   676   NtContinue  (1244308, 0, ...
 02726   676   NtContinue  (1244308, 0, ...
 02727   676   NtContinue  (1244308, 0, ...
 02728   676   NtContinue  (1244308, 0, ...
 02729   676   NtContinue  (1244308, 0, ...
 02730   676   NtContinue  (1244308, 0, ...
 02731   676   NtContinue  (1244308, 0, ...
 02732   676   NtContinue  (1244308, 0, ...
 02733   676   NtContinue  (1244308, 0, ...
 02734   676   NtContinue  (1244308, 0, ...
 02735   676   NtContinue  (1244308, 0, ...
 02736   676   NtContinue  (1244308, 0, ...
 02737   676   NtContinue  (1244308, 0, ...
 02738   676   NtContinue  (1244308, 0, ...
 02739   676   NtContinue  (1244308, 0, ...
 02740   676   NtContinue  (1244308, 0, ...
 02741   676   NtContinue  (1244308, 0, ...
 02742   676   NtContinue  (1244308, 0, ...
 02743   676   NtContinue  (1244308, 0, ...
 02744   676   NtContinue  (1244308, 0, ...
 02745   676   NtContinue  (1244308, 0, ...
 02746   676   NtContinue  (1244308, 0, ...
 02747   676   NtContinue  (1244308, 0, ...
 02748   676   NtContinue  (1244308, 0, ...
 02749   676   NtContinue  (1244308, 0, ...
 02750   676   NtContinue  (1244308, 0, ...
 02751   676   NtContinue  (1244308, 0, ...
 02752   676   NtContinue  (1244308, 0, ...
 02753   676   NtContinue  (1244308, 0, ...
 02754   676   NtContinue  (1244308, 0, ...
 02755   676   NtContinue  (1244308, 0, ...
 02756   676   NtContinue  (1244308, 0, ...
 02757   676   NtContinue  (1244308, 0, ...
 02758   676   NtContinue  (1244308, 0, ...
 02759   676   NtContinue  (1244308, 0, ...
 02760   676   NtContinue  (1244308, 0, ...
 02761   676   NtContinue  (1244308, 0, ...
 02762   676   NtContinue  (1244308, 0, ...
 02763   676   NtContinue  (1244308, 0, ...
 02764   676   NtContinue  (1244308, 0, ...
 02765   676   NtContinue  (1244308, 0, ...
 02766   676   NtContinue  (1244308, 0, ...
 02767   676   NtContinue  (1244308, 0, ...
 02768   676   NtContinue  (1244308, 0, ...
 02769   676   NtContinue  (1244308, 0, ...
 02770   676   NtContinue  (1244308, 0, ...
 02771   676   NtContinue  (1244308, 0, ...
 02772   676   NtContinue  (1244308, 0, ...
 02773   676   NtContinue  (1244308, 0, ...
 02774   676   NtContinue  (1244308, 0, ...
 02775   676   NtContinue  (1244308, 0, ...
 02776   676   NtContinue  (1244308, 0, ...
 02777   676   NtContinue  (1244308, 0, ...
 02778   676   NtContinue  (1244308, 0, ...
 02779   676   NtContinue  (1244308, 0, ...
 02780   676   NtContinue  (1244308, 0, ...
 02781   676   NtContinue  (1244308, 0, ...
 02782   676   NtContinue  (1244308, 0, ...
 02783   676   NtContinue  (1244308, 0, ...
 02784   676   NtContinue  (1244308, 0, ...
 02785   676   NtContinue  (1244308, 0, ...
 02786   676   NtContinue  (1244308, 0, ...
 02787   676   NtContinue  (1244308, 0, ...
 02788   676   NtContinue  (1244308, 0, ...
 02789   676   NtContinue  (1244308, 0, ...
 02790   676   NtContinue  (1244308, 0, ...
 02791   676   NtContinue  (1244308, 0, ...
 02792   676   NtContinue  (1244308, 0, ...
 02793   676   NtContinue  (1244308, 0, ...
 02794   676   NtContinue  (1244308, 0, ...
 02795   676   NtContinue  (1244308, 0, ...
 02796   676   NtContinue  (1244308, 0, ...
 02797   676   NtContinue  (1244308, 0, ...
 02798   676   NtContinue  (1244308, 0, ...
 02799   676   NtContinue  (1244308, 0, ...
 02800   676   NtContinue  (1244308, 0, ...
 02801   676   NtContinue  (1244308, 0, ...
 02802   676   NtContinue  (1244308, 0, ...
 02803   676   NtContinue  (1244308, 0, ...
 02804   676   NtContinue  (1244308, 0, ...
 02805   676   NtContinue  (1244308, 0, ...
 02806   676   NtContinue  (1244308, 0, ...
 02807   676   NtContinue  (1244308, 0, ...
 02808   676   NtContinue  (1244308, 0, ...
 02809   676   NtContinue  (1244308, 0, ...
 02810   676   NtContinue  (1244308, 0, ...
 02811   676   NtContinue  (1244308, 0, ...
 02812   676   NtContinue  (1244308, 0, ...
 02813   676   NtContinue  (1244308, 0, ...
 02814   676   NtContinue  (1244308, 0, ...
 02815   676   NtContinue  (1244308, 0, ...
 02816   676   NtContinue  (1244308, 0, ...
 02817   676   NtContinue  (1244308, 0, ...
 02818   676   NtContinue  (1244308, 0, ...
 02819   676   NtContinue  (1244308, 0, ...
 02820   676   NtContinue  (1244308, 0, ...
 02821   676   NtContinue  (1244308, 0, ...
 02822   676   NtContinue  (1244308, 0, ...
 02823   676   NtContinue  (1244308, 0, ...
 02824   676   NtContinue  (1244308, 0, ...
 02825   676   NtContinue  (1244308, 0, ...
 02826   676   NtContinue  (1244308, 0, ...
 02827   676   NtContinue  (1244308, 0, ...
 02828   676   NtContinue  (1244308, 0, ...
 02829   676   NtContinue  (1244308, 0, ...
 02830   676   NtContinue  (1244308, 0, ...
 02831   676   NtContinue  (1244308, 0, ...
 02832   676   NtContinue  (1244308, 0, ...
 02833   676   NtContinue  (1244308, 0, ...
 02834   676   NtContinue  (1244308, 0, ...
 02835   676   NtContinue  (1244308, 0, ...
 02836   676   NtContinue  (1244308, 0, ...
 02837   676   NtContinue  (1244308, 0, ...
 02838   676   NtContinue  (1244308, 0, ...
 02839   676   NtContinue  (1244308, 0, ...
 02840   676   NtContinue  (1244308, 0, ...
 02841   676   NtContinue  (1244308, 0, ...
 02842   676   NtContinue  (1244308, 0, ...
 02843   676   NtContinue  (1244308, 0, ...
 02844   676   NtContinue  (1244308, 0, ...
 02845   676   NtContinue  (1244308, 0, ...
 02846   676   NtContinue  (1244308, 0, ...
 02847   676   NtContinue  (1244308, 0, ...
 02848   676   NtContinue  (1244308, 0, ...
 02849   676   NtContinue  (1244308, 0, ...
 02850   676   NtContinue  (1244308, 0, ...
 02851   676   NtContinue  (1244308, 0, ...
 02852   676   NtContinue  (1244308, 0, ...
 02853   676   NtContinue  (1244308, 0, ...
 02854   676   NtContinue  (1244308, 0, ...
 02855   676   NtContinue  (1244308, 0, ...
 02856   676   NtContinue  (1244308, 0, ...
 02857   676   NtContinue  (1244308, 0, ...
 02858   676   NtContinue  (1244308, 0, ...
 02859   676   NtContinue  (1244308, 0, ...
 02860   676   NtContinue  (1244308, 0, ...
 02861   676   NtContinue  (1244308, 0, ...
 02862   676   NtContinue  (1244308, 0, ...
 02863   676   NtContinue  (1244308, 0, ...
 02864   676   NtContinue  (1244308, 0, ...
 02865   676   NtContinue  (1244308, 0, ...
 02866   676   NtContinue  (1244308, 0, ...
 02867   676   NtContinue  (1244308, 0, ...
 02868   676   NtContinue  (1244308, 0, ...
 02869   676   NtContinue  (1244308, 0, ...
 02870   676   NtContinue  (1244308, 0, ...
 02871   676   NtContinue  (1244308, 0, ...
 02872   676   NtContinue  (1244308, 0, ...
 02873   676   NtContinue  (1244308, 0, ...
 02874   676   NtContinue  (1244308, 0, ...
 02875   676   NtContinue  (1244308, 0, ...
 02876   676   NtContinue  (1244308, 0, ...
 02877   676   NtContinue  (1244308, 0, ...
 02878   676   NtContinue  (1244308, 0, ...
 02879   676   NtContinue  (1244308, 0, ...
 02880   676   NtContinue  (1244308, 0, ...
 02881   676   NtContinue  (1244308, 0, ...
 02882   676   NtContinue  (1244308, 0, ...
 02883   676   NtContinue  (1244308, 0, ...
 02884   676   NtContinue  (1244308, 0, ...
 02885   676   NtContinue  (1244308, 0, ...
 02886   676   NtContinue  (1244308, 0, ...
 02887   676   NtContinue  (1244308, 0, ...
 02888   676   NtContinue  (1244308, 0, ...
 02889   676   NtContinue  (1244308, 0, ...
 02890   676   NtContinue  (1244308, 0, ...
 02891   676   NtContinue  (1244308, 0, ...
 02892   676   NtContinue  (1244308, 0, ...
 02893   676   NtContinue  (1244308, 0, ...
 02894   676   NtContinue  (1244308, 0, ...
 02895   676   NtContinue  (1244308, 0, ...
 02896   676   NtContinue  (1244308, 0, ...
 02897   676   NtContinue  (1244308, 0, ...
 02898   676   NtContinue  (1244308, 0, ...
 02899   676   NtContinue  (1244308, 0, ...
 02900   676   NtContinue  (1244308, 0, ...
 02901   676   NtContinue  (1244308, 0, ...
 02902   676   NtContinue  (1244308, 0, ...
 02903   676   NtContinue  (1244308, 0, ...
 02904   676   NtContinue  (1244308, 0, ...
 02905   676   NtContinue  (1244308, 0, ...
 02906   676   NtContinue  (1244308, 0, ...
 02907   676   NtContinue  (1244308, 0, ...
 02908   676   NtContinue  (1244308, 0, ...
 02909   676   NtContinue  (1244308, 0, ...
 02910   676   NtContinue  (1244308, 0, ...
 02911   676   NtContinue  (1244308, 0, ...
 02912   676   NtContinue  (1244308, 0, ...
 02913   676   NtContinue  (1244308, 0, ...
 02914   676   NtContinue  (1244308, 0, ...
 02915   676   NtContinue  (1244308, 0, ...
 02916   676   NtContinue  (1244308, 0, ...
 02917   676   NtContinue  (1244308, 0, ...
 02918   676   NtContinue  (1244308, 0, ...
 02919   676   NtContinue  (1244308, 0, ...
 02920   676   NtContinue  (1244308, 0, ...
 02921   676   NtContinue  (1244308, 0, ...
 02922   676   NtContinue  (1244308, 0, ...
 02923   676   NtContinue  (1244308, 0, ...
 02924   676   NtContinue  (1244308, 0, ...
 02925   676   NtContinue  (1244308, 0, ...
 02926   676   NtContinue  (1244308, 0, ...
 02927   676   NtContinue  (1244308, 0, ...
 02928   676   NtContinue  (1244308, 0, ...
 02929   676   NtContinue  (1244308, 0, ...
 02930   676   NtContinue  (1244308, 0, ...
 02931   676   NtContinue  (1244308, 0, ...
 02932   676   NtContinue  (1244308, 0, ...
 02933   676   NtContinue  (1244308, 0, ...
 02934   676   NtContinue  (1244308, 0, ...
 02935   676   NtContinue  (1244308, 0, ...
 02936   676   NtContinue  (1244308, 0, ...
 02937   676   NtContinue  (1244308, 0, ...
 02938   676   NtContinue  (1244308, 0, ...
 02939   676   NtContinue  (1244308, 0, ...
 02940   676   NtContinue  (1244308, 0, ...
 02941   676   NtContinue  (1244308, 0, ...
 02942   676   NtContinue  (1244308, 0, ...
 02943   676   NtContinue  (1244308, 0, ...
 02944   676   NtContinue  (1244308, 0, ...
 02945   676   NtContinue  (1244308, 0, ...
 02946   676   NtContinue  (1244308, 0, ...
 02947   676   NtContinue  (1244308, 0, ...
 02948   676   NtContinue  (1244308, 0, ...
 02949   676   NtContinue  (1244308, 0, ...
 02950   676   NtContinue  (1244308, 0, ...
 02951   676   NtContinue  (1244308, 0, ...
 02952   676   NtContinue  (1244308, 0, ...
 02953   676   NtContinue  (1244308, 0, ...
 02954   676   NtContinue  (1244308, 0, ...
 02955   676   NtContinue  (1244308, 0, ...
 02956   676   NtContinue  (1244308, 0, ...
 02957   676   NtContinue  (1244308, 0, ...
 02958   676   NtContinue  (1244308, 0, ...
 02959   676   NtContinue  (1244308, 0, ...
 02960   676   NtContinue  (1244308, 0, ...
 02961   676   NtContinue  (1244308, 0, ...
 02962   676   NtContinue  (1244308, 0, ...
 02963   676   NtContinue  (1244308, 0, ...
 02964   676   NtContinue  (1244308, 0, ...
 02965   676   NtContinue  (1244308, 0, ...
 02966   676   NtContinue  (1244308, 0, ...
 02967   676   NtContinue  (1244308, 0, ...
 02968   676   NtContinue  (1244308, 0, ...
 02969   676   NtContinue  (1244308, 0, ...
 02970   676   NtContinue  (1244308, 0, ...
 02971   676   NtContinue  (1244308, 0, ...
 02972   676   NtContinue  (1244308, 0, ...
 02973   676   NtContinue  (1244308, 0, ...
 02974   676   NtContinue  (1244308, 0, ...
 02975   676   NtContinue  (1244308, 0, ...
 02976   676   NtContinue  (1244308, 0, ...
 02977   676   NtContinue  (1244308, 0, ...
 02978   676   NtContinue  (1244308, 0, ...
 02979   676   NtContinue  (1244308, 0, ...
 02980   676   NtContinue  (1244308, 0, ...
 02981   676   NtContinue  (1244308, 0, ...
 02982   676   NtContinue  (1244308, 0, ...
 02983   676   NtContinue  (1244308, 0, ...
 02984   676   NtContinue  (1244308, 0, ...
 02985   676   NtContinue  (1244308, 0, ...
 02986   676   NtContinue  (1244308, 0, ...
 02987   676   NtContinue  (1244308, 0, ...
 02988   676   NtContinue  (1244308, 0, ...
 02989   676   NtContinue  (1244308, 0, ...
 02990   676   NtContinue  (1244308, 0, ...
 02991   676   NtContinue  (1244308, 0, ...
 02992   676   NtContinue  (1244308, 0, ...
 02993   676   NtContinue  (1244308, 0, ...
 02994   676   NtContinue  (1244308, 0, ...
 02995   676   NtContinue  (1244308, 0, ...
 02996   676   NtContinue  (1244308, 0, ...
 02997   676   NtContinue  (1244308, 0, ...
 02998   676   NtContinue  (1244308, 0, ...
 02999   676   NtContinue  (1244308, 0, ...
 03000   676   NtContinue  (1244308, 0, ...
 03001   676   NtContinue  (1244308, 0, ...
 03002   676   NtContinue  (1244308, 0, ...
 03003   676   NtContinue  (1244308, 0, ...
 03004   676   NtContinue  (1244308, 0, ...
 03005   676   NtContinue  (1244308, 0, ...
 03006   676   NtContinue  (1244308, 0, ...
 03007   676   NtContinue  (1244308, 0, ...
 03008   676   NtContinue  (1244308, 0, ...
 03009   676   NtContinue  (1244308, 0, ...
 03010   676   NtContinue  (1244308, 0, ...
 03011   676   NtContinue  (1244308, 0, ...
 03012   676   NtContinue  (1244308, 0, ...
 03013   676   NtContinue  (1244308, 0, ...
 03014   676   NtContinue  (1244308, 0, ...
 03015   676   NtContinue  (1244308, 0, ...
 03016   676   NtContinue  (1244308, 0, ...
 03017   676   NtContinue  (1244308, 0, ...
 03018   676   NtContinue  (1244308, 0, ...
 03019   676   NtContinue  (1244308, 0, ...
 03020   676   NtContinue  (1244308, 0, ...
 03021   676   NtContinue  (1244308, 0, ...
 03022   676   NtContinue  (1244308, 0, ...
 03023   676   NtContinue  (1244308, 0, ...
 03024   676   NtContinue  (1244308, 0, ...
 03025   676   NtContinue  (1244308, 0, ...
 03026   676   NtContinue  (1244308, 0, ...
 03027   676   NtContinue  (1244308, 0, ...
 03028   676   NtContinue  (1244308, 0, ...
 03029   676   NtContinue  (1244308, 0, ...
 03030   676   NtContinue  (1244308, 0, ...
 03031   676   NtContinue  (1244308, 0, ...
 03032   676   NtContinue  (1244308, 0, ...
 03033   676   NtContinue  (1244308, 0, ...
 03034   676   NtContinue  (1244308, 0, ...
 03035   676   NtContinue  (1244308, 0, ...
 03036   676   NtContinue  (1244308, 0, ...
 03037   676   NtContinue  (1244308, 0, ...
 03038   676   NtContinue  (1244308, 0, ...
 03039   676   NtContinue  (1244308, 0, ...
 03040   676   NtContinue  (1244308, 0, ...
 03041   676   NtContinue  (1244308, 0, ...
 03042   676   NtContinue  (1244308, 0, ...
 03043   676   NtContinue  (1244308, 0, ...
 03044   676   NtContinue  (1244308, 0, ...
 03045   676   NtContinue  (1244308, 0, ...
 03046   676   NtContinue  (1244308, 0, ...
 03047   676   NtContinue  (1244308, 0, ...
 03048   676   NtContinue  (1244308, 0, ...
 03049   676   NtContinue  (1244308, 0, ...
 03050   676   NtContinue  (1244308, 0, ...
 03051   676   NtContinue  (1244308, 0, ...
 03052   676   NtContinue  (1244308, 0, ...
 03053   676   NtContinue  (1244308, 0, ...
 03054   676   NtContinue  (1244308, 0, ...
 03055   676   NtContinue  (1244308, 0, ...
 03056   676   NtContinue  (1244308, 0, ...
 03057   676   NtContinue  (1244308, 0, ...
 03058   676   NtContinue  (1244308, 0, ...
 03059   676   NtContinue  (1244308, 0, ...
 03060   676   NtContinue  (1244308, 0, ...
 03061   676   NtContinue  (1244308, 0, ...
 03062   676   NtContinue  (1244308, 0, ...
 03063   676   NtContinue  (1244308, 0, ...
 03064   676   NtContinue  (1244308, 0, ...
 03065   676   NtContinue  (1244308, 0, ...
 03066   676   NtContinue  (1244308, 0, ...
 03067   676   NtContinue  (1244308, 0, ...
 03068   676   NtContinue  (1244308, 0, ...
 03069   676   NtContinue  (1244308, 0, ...
 03070   676   NtContinue  (1244308, 0, ...
 03071   676   NtContinue  (1244308, 0, ...
 03072   676   NtContinue  (1244308, 0, ...
 03073   676   NtContinue  (1244308, 0, ...
 03074   676   NtContinue  (1244308, 0, ...
 03075   676   NtContinue  (1244308, 0, ...
 03076   676   NtContinue  (1244308, 0, ...
 03077   676   NtContinue  (1244308, 0, ...
 03078   676   NtContinue  (1244308, 0, ...
 03079   676   NtContinue  (1244308, 0, ...
 03080   676   NtContinue  (1244308, 0, ...
 03081   676   NtContinue  (1244308, 0, ...
 03082   676   NtContinue  (1244308, 0, ...
 03083   676   NtContinue  (1244308, 0, ...
 03084   676   NtContinue  (1244308, 0, ...
 03085   676   NtContinue  (1244308, 0, ...
 03086   676   NtContinue  (1244308, 0, ...
 03087   676   NtContinue  (1244308, 0, ...
 03088   676   NtContinue  (1244308, 0, ...
 03089   676   NtContinue  (1244308, 0, ...
 03090   676   NtContinue  (1244308, 0, ...
 03091   676   NtContinue  (1244308, 0, ...
 03092   676   NtContinue  (1244308, 0, ...
 03093   676   NtContinue  (1244308, 0, ...
 03094   676   NtContinue  (1244308, 0, ...
 03095   676   NtContinue  (1244308, 0, ...
 03096   676   NtContinue  (1244308, 0, ...
 03097   676   NtContinue  (1244308, 0, ...
 03098   676   NtContinue  (1244308, 0, ...
 03099   676   NtContinue  (1244308, 0, ...
 03100   676   NtContinue  (1244308, 0, ...
 03101   676   NtContinue  (1244308, 0, ...
 03102   676   NtContinue  (1244308, 0, ...
 03103   676   NtContinue  (1244308, 0, ...
 03104   676   NtContinue  (1244308, 0, ...
 03105   676   NtContinue  (1244308, 0, ...
 03106   676   NtContinue  (1244308, 0, ...
 03107   676   NtContinue  (1244308, 0, ...
 03108   676   NtContinue  (1244308, 0, ...
 03109   676   NtContinue  (1244308, 0, ...
 03110   676   NtContinue  (1244308, 0, ...
 03111   676   NtContinue  (1244308, 0, ...
 03112   676   NtContinue  (1244308, 0, ...
 03113   676   NtContinue  (1244308, 0, ...
 03114   676   NtContinue  (1244308, 0, ...
 03115   676   NtContinue  (1244308, 0, ...
 03116   676   NtContinue  (1244308, 0, ...
 03117   676   NtContinue  (1244308, 0, ...
 03118   676   NtContinue  (1244308, 0, ...
 03119   676   NtContinue  (1244308, 0, ...
 03120   676   NtContinue  (1244308, 0, ...
 03121   676   NtContinue  (1244308, 0, ...
 03122   676   NtContinue  (1244308, 0, ...
 03123   676   NtContinue  (1244308, 0, ...
 03124   676   NtContinue  (1244308, 0, ...
 03125   676   NtContinue  (1244308, 0, ...
 03126   676   NtContinue  (1244308, 0, ...
 03127   676   NtContinue  (1244308, 0, ...
 03128   676   NtContinue  (1244308, 0, ...
 03129   676   NtContinue  (1244308, 0, ...
 03130   676   NtContinue  (1244308, 0, ...
 03131   676   NtContinue  (1244308, 0, ...
 03132   676   NtContinue  (1244308, 0, ...
 03133   676   NtContinue  (1244308, 0, ...
 03134   676   NtContinue  (1244308, 0, ...
 03135   676   NtContinue  (1244308, 0, ...
 03136   676   NtContinue  (1244308, 0, ...
 03137   676   NtContinue  (1244308, 0, ...
 03138   676   NtContinue  (1244308, 0, ...
 03139   676   NtContinue  (1244308, 0, ...
 03140   676   NtContinue  (1244308, 0, ...
 03141   676   NtContinue  (1244308, 0, ...
 03142   676   NtContinue  (1244308, 0, ...
 03143   676   NtContinue  (1244308, 0, ...
 03144   676   NtContinue  (1244308, 0, ...
 03145   676   NtContinue  (1244308, 0, ...
 03146   676   NtContinue  (1244308, 0, ...
 03147   676   NtContinue  (1244308, 0, ...
 03148   676   NtContinue  (1244308, 0, ...
 03149   676   NtContinue  (1244308, 0, ...
 03150   676   NtContinue  (1244308, 0, ...
 03151   676   NtContinue  (1244308, 0, ...
 03152   676   NtContinue  (1244308, 0, ...
 03153   676   NtContinue  (1244308, 0, ...
 03154   676   NtContinue  (1244308, 0, ...
 03155   676   NtContinue  (1244308, 0, ...
 03156   676   NtContinue  (1244308, 0, ...
 03157   676   NtContinue  (1244308, 0, ...
 03158   676   NtContinue  (1244308, 0, ...
 03159   676   NtContinue  (1244308, 0, ...
 03160   676   NtContinue  (1244308, 0, ...
 03161   676   NtContinue  (1244308, 0, ...
 03162   676   NtContinue  (1244308, 0, ...
 03163   676   NtContinue  (1244308, 0, ...
 03164   676   NtContinue  (1244308, 0, ...
 03165   676   NtContinue  (1244308, 0, ...
 03166   676   NtContinue  (1244308, 0, ...
 03167   676   NtContinue  (1244308, 0, ...
 03168   676   NtContinue  (1244308, 0, ...
 03169   676   NtContinue  (1244308, 0, ...
 03170   676   NtContinue  (1244308, 0, ...
 03171   676   NtContinue  (1244308, 0, ...
 03172   676   NtContinue  (1244308, 0, ...
 03173   676   NtContinue  (1244308, 0, ...
 03174   676   NtContinue  (1244308, 0, ...
 03175   676   NtContinue  (1244308, 0, ...
 03176   676   NtContinue  (1244308, 0, ...
 03177   676   NtContinue  (1244308, 0, ...
 03178   676   NtContinue  (1244308, 0, ...
 03179   676   NtContinue  (1244308, 0, ...
 03180   676   NtContinue  (1244308, 0, ...
 03181   676   NtContinue  (1244308, 0, ...
 03182   676   NtContinue  (1244308, 0, ...
 03183   676   NtContinue  (1244308, 0, ...
 03184   676   NtContinue  (1244308, 0, ...
 03185   676   NtContinue  (1244308, 0, ...
 03186   676   NtContinue  (1244308, 0, ...
 03187   676   NtContinue  (1244308, 0, ...
 03188   676   NtContinue  (1244308, 0, ...
 03189   676   NtContinue  (1244308, 0, ...
 03190   676   NtContinue  (1244308, 0, ...
 03191   676   NtContinue  (1244308, 0, ...
 03192   676   NtContinue  (1244308, 0, ...
 03193   676   NtContinue  (1244308, 0, ...
 03194   676   NtContinue  (1244308, 0, ...
 03195   676   NtContinue  (1244308, 0, ...
 03196   676   NtContinue  (1244308, 0, ...
 03197   676   NtContinue  (1244308, 0, ...
 03198   676   NtContinue  (1244308, 0, ...
 03199   676   NtContinue  (1244308, 0, ...
 03200   676   NtContinue  (1244308, 0, ...
 03201   676   NtContinue  (1244308, 0, ...
 03202   676   NtContinue  (1244308, 0, ...
 03203   676   NtContinue  (1244308, 0, ...
 03204   676   NtContinue  (1244308, 0, ...
 03205   676   NtContinue  (1244308, 0, ...
 03206   676   NtContinue  (1244308, 0, ...
 03207   676   NtContinue  (1244308, 0, ...
 03208   676   NtContinue  (1244308, 0, ...
 03209   676   NtContinue  (1244308, 0, ...
 03210   676   NtContinue  (1244308, 0, ...
 03211   676   NtContinue  (1244308, 0, ...
 03212   676   NtContinue  (1244308, 0, ...
 03213   676   NtContinue  (1244308, 0, ...
 03214   676   NtContinue  (1244308, 0, ...
 03215   676   NtContinue  (1244308, 0, ...
 03216   676   NtContinue  (1244308, 0, ...
 03217   676   NtContinue  (1244308, 0, ...
 03218   676   NtContinue  (1244308, 0, ...
 03219   676   NtContinue  (1244308, 0, ...
 03220   676   NtContinue  (1244308, 0, ...
 03221   676   NtContinue  (1244308, 0, ...
 03222   676   NtContinue  (1244308, 0, ...
 03223   676   NtContinue  (1244308, 0, ...
 03224   676   NtContinue  (1244308, 0, ...
 03225   676   NtContinue  (1244308, 0, ...
 03226   676   NtContinue  (1244308, 0, ...
 03227   676   NtContinue  (1244308, 0, ...
 03228   676   NtContinue  (1244308, 0, ...
 03229   676   NtContinue  (1244308, 0, ...
 03230   676   NtContinue  (1244308, 0, ...
 03231   676   NtContinue  (1244308, 0, ...
 03232   676   NtContinue  (1244308, 0, ...
 03233   676   NtContinue  (1244308, 0, ...
 03234   676   NtContinue  (1244308, 0, ...
 03235   676   NtContinue  (1244308, 0, ...
 03236   676   NtContinue  (1244308, 0, ...
 03237   676   NtContinue  (1244308, 0, ...
 03238   676   NtContinue  (1244308, 0, ...
 03239   676   NtContinue  (1244308, 0, ...
 03240   676   NtContinue  (1244308, 0, ...
 03241   676   NtContinue  (1244308, 0, ...
 03242   676   NtContinue  (1244308, 0, ...
 03243   676   NtContinue  (1244308, 0, ...
 03244   676   NtContinue  (1244308, 0, ...
 03245   676   NtContinue  (1244308, 0, ...
 03246   676   NtContinue  (1244308, 0, ...
 03247   676   NtContinue  (1244308, 0, ...
 03248   676   NtContinue  (1244308, 0, ...
 03249   676   NtContinue  (1244308, 0, ...
 03250   676   NtContinue  (1244308, 0, ...
 03251   676   NtContinue  (1244308, 0, ...
 03252   676   NtContinue  (1244308, 0, ...
 03253   676   NtContinue  (1244308, 0, ...
 03254   676   NtContinue  (1244308, 0, ...
 03255   676   NtContinue  (1244308, 0, ...
 03256   676   NtContinue  (1244308, 0, ...
 03257   676   NtContinue  (1244308, 0, ...
 03258   676   NtContinue  (1244308, 0, ...
 03259   676   NtContinue  (1244308, 0, ...
 03260   676   NtContinue  (1244308, 0, ...
 03261   676   NtContinue  (1244308, 0, ...
 03262   676   NtContinue  (1244308, 0, ...
 03263   676   NtContinue  (1244308, 0, ...
 03264   676   NtContinue  (1244308, 0, ...
 03265   676   NtContinue  (1244308, 0, ...
 03266   676   NtContinue  (1244308, 0, ...
 03267   676   NtContinue  (1244308, 0, ...
 03268   676   NtContinue  (1244308, 0, ...
 03269   676   NtContinue  (1244308, 0, ...
 03270   676   NtContinue  (1244308, 0, ...
 03271   676   NtContinue  (1244308, 0, ...
 03272   676   NtContinue  (1244308, 0, ...
 03273   676   NtContinue  (1244308, 0, ...
 03274   676   NtContinue  (1244308, 0, ...
 03275   676   NtContinue  (1244308, 0, ...
 03276   676   NtContinue  (1244308, 0, ...
 03277   676   NtContinue  (1244308, 0, ...
 03278   676   NtContinue  (1244308, 0, ...
 03279   676   NtContinue  (1244308, 0, ...
 03280   676   NtContinue  (1244308, 0, ...
 03281   676   NtContinue  (1244308, 0, ...
 03282   676   NtContinue  (1244308, 0, ...
 03283   676   NtContinue  (1244308, 0, ...
 03284   676   NtContinue  (1244308, 0, ...
 03285   676   NtContinue  (1244308, 0, ...
 03286   676   NtContinue  (1244308, 0, ...
 03287   676   NtContinue  (1244308, 0, ...
 03288   676   NtContinue  (1244308, 0, ...
 03289   676   NtContinue  (1244308, 0, ...
 03290   676   NtContinue  (1244308, 0, ...
 03291   676   NtContinue  (1244308, 0, ...
 03292   676   NtContinue  (1244308, 0, ...
 03293   676   NtContinue  (1244308, 0, ...
 03294   676   NtContinue  (1244308, 0, ...
 03295   676   NtContinue  (1244308, 0, ...
 03296   676   NtContinue  (1244308, 0, ...
 03297   676   NtContinue  (1244308, 0, ...
 03298   676   NtContinue  (1244308, 0, ...
 03299   676   NtContinue  (1244308, 0, ...
 03300   676   NtContinue  (1244308, 0, ...
 03301   676   NtContinue  (1244308, 0, ...
 03302   676   NtContinue  (1244308, 0, ...
 03303   676   NtContinue  (1244308, 0, ...
 03304   676   NtContinue  (1244308, 0, ...
 03305   676   NtContinue  (1244308, 0, ...
 03306   676   NtContinue  (1244308, 0, ...
 03307   676   NtContinue  (1244308, 0, ...
 03308   676   NtContinue  (1244308, 0, ...
 03309   676   NtContinue  (1244308, 0, ...
 03310   676   NtContinue  (1244308, 0, ...
 03311   676   NtContinue  (1244308, 0, ...
 03312   676   NtContinue  (1244308, 0, ...
 03313   676   NtContinue  (1244308, 0, ...
 03314   676   NtContinue  (1244308, 0, ...
 03315   676   NtContinue  (1244308, 0, ...
 03316   676   NtContinue  (1244308, 0, ...
 03317   676   NtContinue  (1244308, 0, ...
 03318   676   NtContinue  (1244308, 0, ...
 03319   676   NtContinue  (1244308, 0, ...
 03320   676   NtContinue  (1244308, 0, ...
 03321   676   NtContinue  (1244308, 0, ...
 03322   676   NtContinue  (1244308, 0, ...
 03323   676   NtContinue  (1244308, 0, ...
 03324   676   NtContinue  (1244308, 0, ...
 03325   676   NtContinue  (1244308, 0, ...
 03326   676   NtContinue  (1244308, 0, ...
 03327   676   NtContinue  (1244308, 0, ...
 03328   676   NtContinue  (1244308, 0, ...
 03329   676   NtContinue  (1244308, 0, ...
 03330   676   NtContinue  (1244308, 0, ...
 03331   676   NtContinue  (1244308, 0, ...
 03332   676   NtContinue  (1244308, 0, ...
 03333   676   NtContinue  (1244308, 0, ...
 03334   676   NtContinue  (1244308, 0, ...
 03335   676   NtContinue  (1244308, 0, ...
 03336   676   NtContinue  (1244308, 0, ...
 03337   676   NtContinue  (1244308, 0, ...
 03338   676   NtContinue  (1244308, 0, ...
 03339   676   NtContinue  (1244308, 0, ...
 03340   676   NtContinue  (1244308, 0, ...
 03341   676   NtContinue  (1244308, 0, ...
 03342   676   NtContinue  (1244308, 0, ...
 03343   676   NtContinue  (1244308, 0, ...
 03344   676   NtContinue  (1244308, 0, ...
 03345   676   NtContinue  (1244308, 0, ...
 03346   676   NtContinue  (1244308, 0, ...
 03347   676   NtContinue  (1244308, 0, ...
 03348   676   NtContinue  (1244308, 0, ...
 03349   676   NtContinue  (1244308, 0, ...
 03350   676   NtContinue  (1244308, 0, ...
 03351   676   NtContinue  (1244308, 0, ...
 03352   676   NtContinue  (1244308, 0, ...
 03353   676   NtContinue  (1244308, 0, ...
 03354   676   NtContinue  (1244308, 0, ...
 03355   676   NtContinue  (1244308, 0, ...
 03356   676   NtContinue  (1244308, 0, ...
 03357   676   NtContinue  (1244308, 0, ...
 03358   676   NtContinue  (1244308, 0, ...
 03359   676   NtContinue  (1244308, 0, ...
 03360   676   NtContinue  (1244308, 0, ...
 03361   676   NtContinue  (1244308, 0, ...
 03362   676   NtContinue  (1244308, 0, ...
 03363   676   NtContinue  (1244308, 0, ...
 03364   676   NtContinue  (1244308, 0, ...
 03365   676   NtContinue  (1244308, 0, ...
 03366   676   NtContinue  (1244308, 0, ...
 03367   676   NtContinue  (1244308, 0, ...
 03368   676   NtContinue  (1244308, 0, ...
 03369   676   NtContinue  (1244308, 0, ...
 03370   676   NtContinue  (1244308, 0, ...
 03371   676   NtContinue  (1244308, 0, ...
 03372   676   NtContinue  (1244308, 0, ...
 03373   676   NtContinue  (1244308, 0, ...
 03374   676   NtContinue  (1244308, 0, ...
 03375   676   NtContinue  (1244308, 0, ...
 03376   676   NtContinue  (1244308, 0, ...
 03377   676   NtContinue  (1244308, 0, ...
 03378   676   NtContinue  (1244308, 0, ...
 03379   676   NtContinue  (1244308, 0, ...
 03380   676   NtContinue  (1244308, 0, ...
 03381   676   NtContinue  (1244308, 0, ...
 03382   676   NtContinue  (1244308, 0, ...
 03383   676   NtContinue  (1244308, 0, ...
 03384   676   NtContinue  (1244308, 0, ...
 03385   676   NtContinue  (1244308, 0, ...
 03386   676   NtContinue  (1244308, 0, ...
 03387   676   NtContinue  (1244308, 0, ...
 03388   676   NtContinue  (1244308, 0, ...
 03389   676   NtContinue  (1244308, 0, ...
 03390   676   NtContinue  (1244308, 0, ...
 03391   676   NtContinue  (1244308, 0, ...
 03392   676   NtContinue  (1244308, 0, ...
 03393   676   NtContinue  (1244308, 0, ...
 03394   676   NtContinue  (1244308, 0, ...
 03395   676   NtContinue  (1244308, 0, ...
 03396   676   NtContinue  (1244308, 0, ...
 03397   676   NtContinue  (1244308, 0, ...
 03398   676   NtContinue  (1244308, 0, ...
 03399   676   NtContinue  (1244308, 0, ...
 03400   676   NtContinue  (1244308, 0, ...
 03401   676   NtContinue  (1244308, 0, ...
 03402   676   NtContinue  (1244308, 0, ...
 03403   676   NtContinue  (1244308, 0, ...
 03404   676   NtContinue  (1244308, 0, ...
 03405   676   NtContinue  (1244308, 0, ...
 03406   676   NtContinue  (1244308, 0, ...
 03407   676   NtContinue  (1244308, 0, ...
 03408   676   NtContinue  (1244308, 0, ...
 03409   676   NtContinue  (1244308, 0, ...
 03410   676   NtContinue  (1244308, 0, ...
 03411   676   NtContinue  (1244308, 0, ...
 03412   676   NtContinue  (1244308, 0, ...
 03413   676   NtContinue  (1244308, 0, ...
 03414   676   NtContinue  (1244308, 0, ...
 03415   676   NtContinue  (1244308, 0, ...
 03416   676   NtContinue  (1244308, 0, ...
 03417   676   NtContinue  (1244308, 0, ...
 03418   676   NtContinue  (1244308, 0, ...
 03419   676   NtContinue  (1244308, 0, ...
 03420   676   NtContinue  (1244308, 0, ...
 03421   676   NtContinue  (1244308, 0, ...
 03422   676   NtContinue  (1244308, 0, ...
 03423   676   NtContinue  (1244308, 0, ...
 03424   676   NtContinue  (1244308, 0, ...
 03425   676   NtContinue  (1244308, 0, ...
 03426   676   NtContinue  (1244308, 0, ...
 03427   676   NtContinue  (1244308, 0, ...
 03428   676   NtContinue  (1244308, 0, ...
 03429   676   NtContinue  (1244308, 0, ...
 03430   676   NtContinue  (1244308, 0, ...
 03431   676   NtContinue  (1244308, 0, ...
 03432   676   NtContinue  (1244308, 0, ...
 03433   676   NtContinue  (1244308, 0, ...
 03434   676   NtContinue  (1244308, 0, ...
 03435   676   NtContinue  (1244308, 0, ...
 03436   676   NtContinue  (1244308, 0, ...
 03437   676   NtContinue  (1244308, 0, ...
 03438   676   NtContinue  (1244308, 0, ...
 03439   676   NtContinue  (1244308, 0, ...
 03440   676   NtContinue  (1244308, 0, ...
 03441   676   NtContinue  (1244308, 0, ...
 03442   676   NtContinue  (1244308, 0, ...
 03443   676   NtContinue  (1244308, 0, ...
 03444   676   NtContinue  (1244308, 0, ...
 03445   676   NtContinue  (1244308, 0, ...
 03446   676   NtContinue  (1244308, 0, ...
 03447   676   NtContinue  (1244308, 0, ...
 03448   676   NtContinue  (1244308, 0, ...
 03449   676   NtContinue  (1244308, 0, ...
 03450   676   NtContinue  (1244308, 0, ...
 03451   676   NtContinue  (1244308, 0, ...
 03452   676   NtContinue  (1244308, 0, ...
 03453   676   NtContinue  (1244308, 0, ...
 03454   676   NtContinue  (1244308, 0, ...
 03455   676   NtContinue  (1244308, 0, ...
 03456   676   NtContinue  (1244308, 0, ...
 03457   676   NtContinue  (1244308, 0, ...
 03458   676   NtContinue  (1244308, 0, ...
 03459   676   NtContinue  (1244308, 0, ...
 03460   676   NtContinue  (1244308, 0, ...
 03461   676   NtContinue  (1244308, 0, ...
 03462   676   NtContinue  (1244308, 0, ...
 03463   676   NtContinue  (1244308, 0, ...
 03464   676   NtContinue  (1244308, 0, ...
 03465   676   NtContinue  (1244308, 0, ...
 03466   676   NtContinue  (1244308, 0, ...
 03467   676   NtContinue  (1244308, 0, ...
 03468   676   NtContinue  (1244308, 0, ...
 03469   676   NtContinue  (1244308, 0, ...
 03470   676   NtContinue  (1244308, 0, ...
 03471   676   NtContinue  (1244308, 0, ...
 03472   676   NtContinue  (1244308, 0, ...
 03473   676   NtContinue  (1244308, 0, ...
 03474   676   NtContinue  (1244308, 0, ...
 03475   676   NtContinue  (1244308, 0, ...
 03476   676   NtContinue  (1244308, 0, ...
 03477   676   NtContinue  (1244308, 0, ...
 03478   676   NtContinue  (1244308, 0, ...
 03479   676   NtContinue  (1244308, 0, ...
 03480   676   NtContinue  (1244308, 0, ...
 03481   676   NtContinue  (1244308, 0, ...
 03482   676   NtContinue  (1244308, 0, ...
 03483   676   NtContinue  (1244308, 0, ...
 03484   676   NtContinue  (1244308, 0, ...
 03485   676   NtContinue  (1244308, 0, ...
 03486   676   NtContinue  (1244308, 0, ...
 03487   676   NtContinue  (1244308, 0, ...
 03488   676   NtContinue  (1244308, 0, ...
 03489   676   NtContinue  (1244308, 0, ...
 03490   676   NtContinue  (1244308, 0, ...
 03491   676   NtContinue  (1244308, 0, ...
 03492   676   NtContinue  (1244308, 0, ...
 03493   676   NtContinue  (1244308, 0, ...
 03494   676   NtContinue  (1244308, 0, ...
 03495   676   NtContinue  (1244308, 0, ...
 03496   676   NtContinue  (1244308, 0, ...
 03497   676   NtContinue  (1244308, 0, ...
 03498   676   NtContinue  (1244308, 0, ...
 03499   676   NtContinue  (1244308, 0, ...
 03500   676   NtContinue  (1244308, 0, ...
 03501   676   NtContinue  (1244308, 0, ...
 03502   676   NtContinue  (1244308, 0, ...
 03503   676   NtContinue  (1244308, 0, ...
 03504   676   NtContinue  (1244308, 0, ...
 03505   676   NtContinue  (1244308, 0, ...
 03506   676   NtContinue  (1244308, 0, ...
 03507   676   NtContinue  (1244308, 0, ...
 03508   676   NtContinue  (1244308, 0, ...
 03509   676   NtContinue  (1244308, 0, ...
 03510   676   NtContinue  (1244308, 0, ...
 03511   676   NtContinue  (1244308, 0, ...
 03512   676   NtContinue  (1244308, 0, ...
 03513   676   NtContinue  (1244308, 0, ...
 03514   676   NtContinue  (1244308, 0, ...
 03515   676   NtContinue  (1244308, 0, ...
 03516   676   NtContinue  (1244308, 0, ...
 03517   676   NtContinue  (1244308, 0, ...
 03518   676   NtContinue  (1244308, 0, ...
 03519   676   NtContinue  (1244308, 0, ...
 03520   676   NtContinue  (1244308, 0, ...
 03521   676   NtContinue  (1244308, 0, ...
 03522   676   NtContinue  (1244308, 0, ...
 03523   676   NtContinue  (1244308, 0, ...
 03524   676   NtContinue  (1244308, 0, ...
 03525   676   NtContinue  (1244308, 0, ...
 03526   676   NtContinue  (1244308, 0, ...
 03527   676   NtContinue  (1244308, 0, ...
 03528   676   NtContinue  (1244308, 0, ...
 03529   676   NtContinue  (1244308, 0, ...
 03530   676   NtContinue  (1244308, 0, ...
 03531   676   NtContinue  (1244308, 0, ...
 03532   676   NtContinue  (1244308, 0, ...
 03533   676   NtContinue  (1244308, 0, ...
 03534   676   NtContinue  (1244308, 0, ...
 03535   676   NtContinue  (1244308, 0, ...
 03536   676   NtContinue  (1244308, 0, ...
 03537   676   NtContinue  (1244308, 0, ...
 03538   676   NtContinue  (1244308, 0, ...
 03539   676   NtContinue  (1244308, 0, ...
 03540   676   NtContinue  (1244308, 0, ...
 03541   676   NtContinue  (1244308, 0, ...
 03542   676   NtContinue  (1244308, 0, ...
 03543   676   NtContinue  (1244308, 0, ...
 03544   676   NtContinue  (1244308, 0, ...
 03545   676   NtContinue  (1244308, 0, ...
 03546   676   NtContinue  (1244308, 0, ...
 03547   676   NtContinue  (1244308, 0, ...
 03548   676   NtContinue  (1244308, 0, ...
 03549   676   NtContinue  (1244308, 0, ...
 03550   676   NtContinue  (1244308, 0, ...
 03551   676   NtContinue  (1244308, 0, ...
 03552   676   NtContinue  (1244308, 0, ...
 03553   676   NtContinue  (1244308, 0, ...
 03554   676   NtContinue  (1244308, 0, ...
 03555   676   NtContinue  (1244308, 0, ...
 03556   676   NtContinue  (1244308, 0, ...
 03557   676   NtContinue  (1244308, 0, ...
 03558   676   NtContinue  (1244308, 0, ...
 03559   676   NtContinue  (1244308, 0, ...
 03560   676   NtContinue  (1244308, 0, ...
 03561   676   NtContinue  (1244308, 0, ...
 03562   676   NtContinue  (1244308, 0, ...
 03563   676   NtContinue  (1244308, 0, ...
 03564   676   NtContinue  (1244308, 0, ...
 03565   676   NtContinue  (1244308, 0, ...
 03566   676   NtContinue  (1244308, 0, ...
 03567   676   NtContinue  (1244308, 0, ...
 03568   676   NtContinue  (1244308, 0, ...
 03569   676   NtContinue  (1244308, 0, ...
 03570   676   NtContinue  (1244308, 0, ...
 03571   676   NtContinue  (1244308, 0, ...
 03572   676   NtContinue  (1244308, 0, ...
 03573   676   NtContinue  (1244308, 0, ...
 03574   676   NtContinue  (1244308, 0, ...
 03575   676   NtContinue  (1244308, 0, ...
 03576   676   NtContinue  (1244308, 0, ...
 03577   676   NtContinue  (1244308, 0, ...
 03578   676   NtContinue  (1244308, 0, ...
 03579   676   NtContinue  (1244308, 0, ...
 03580   676   NtContinue  (1244308, 0, ...
 03581   676   NtContinue  (1244308, 0, ...
 03582   676   NtContinue  (1244308, 0, ...
 03583   676   NtContinue  (1244308, 0, ...
 03584   676   NtContinue  (1244308, 0, ...
 03585   676   NtContinue  (1244308, 0, ...
 03586   676   NtContinue  (1244308, 0, ...
 03587   676   NtContinue  (1244308, 0, ...
 03588   676   NtContinue  (1244308, 0, ...
 03589   676   NtContinue  (1244308, 0, ...
 03590   676   NtContinue  (1244308, 0, ...
 03591   676   NtContinue  (1244308, 0, ...
 03592   676   NtContinue  (1244308, 0, ...
 03593   676   NtContinue  (1244308, 0, ...
 03594   676   NtContinue  (1244308, 0, ...
 03595   676   NtContinue  (1244308, 0, ...
 03596   676   NtContinue  (1244308, 0, ...
 03597   676   NtContinue  (1244308, 0, ...
 03598   676   NtContinue  (1244308, 0, ...
 03599   676   NtContinue  (1244308, 0, ...
 03600   676   NtContinue  (1244308, 0, ...
 03601   676   NtContinue  (1244308, 0, ...
 03602   676   NtContinue  (1244308, 0, ...
 03603   676   NtContinue  (1244308, 0, ...
 03604   676   NtContinue  (1244308, 0, ...
 03605   676   NtContinue  (1244308, 0, ...
 03606   676   NtContinue  (1244308, 0, ...
 03607   676   NtContinue  (1244308, 0, ...
 03608   676   NtContinue  (1244308, 0, ...
 03609   676   NtContinue  (1244308, 0, ...
 03610   676   NtContinue  (1244308, 0, ...
 03611   676   NtContinue  (1244308, 0, ...
 03612   676   NtContinue  (1244308, 0, ...
 03613   676   NtContinue  (1244308, 0, ...
 03614   676   NtContinue  (1244308, 0, ...
 03615   676   NtContinue  (1244308, 0, ...
 03616   676   NtContinue  (1244308, 0, ...
 03617   676   NtContinue  (1244308, 0, ...
 03618   676   NtContinue  (1244308, 0, ...
 03619   676   NtContinue  (1244308, 0, ...
 03620   676   NtContinue  (1244308, 0, ...
 03621   676   NtContinue  (1244308, 0, ...
 03622   676   NtContinue  (1244308, 0, ...
 03623   676   NtContinue  (1244308, 0, ...
 03624   676   NtContinue  (1244308, 0, ...
 03625   676   NtContinue  (1244308, 0, ...
 03626   676   NtContinue  (1244308, 0, ...
 03627   676   NtContinue  (1244308, 0, ...
 03628   676   NtContinue  (1244308, 0, ...
 03629   676   NtContinue  (1244308, 0, ...
 03630   676   NtContinue  (1244308, 0, ...
 03631   676   NtContinue  (1244308, 0, ...
 03632   676   NtContinue  (1244308, 0, ...
 03633   676   NtContinue  (1244308, 0, ...
 03634   676   NtContinue  (1244308, 0, ...
 03635   676   NtContinue  (1244308, 0, ...
 03636   676   NtContinue  (1244308, 0, ...
 03637   676   NtContinue  (1244308, 0, ...
 03638   676   NtContinue  (1244308, 0, ...
 03639   676   NtContinue  (1244308, 0, ...
 03640   676   NtContinue  (1244308, 0, ...
 03641   676   NtContinue  (1244308, 0, ...
 03642   676   NtContinue  (1244308, 0, ...
 03643   676   NtContinue  (1244308, 0, ...
 03644   676   NtContinue  (1244308, 0, ...
 03645   676   NtContinue  (1244308, 0, ...
 03646   676   NtContinue  (1244308, 0, ...
 03647   676   NtContinue  (1244308, 0, ...
 03648   676   NtContinue  (1244308, 0, ...
 03649   676   NtContinue  (1244308, 0, ...
 03650   676   NtContinue  (1244308, 0, ...
 03651   676   NtContinue  (1244308, 0, ...
 03652   676   NtContinue  (1244308, 0, ...
 03653   676   NtContinue  (1244308, 0, ...
 03654   676   NtContinue  (1244308, 0, ...
 03655   676   NtContinue  (1244308, 0, ...
 03656   676   NtContinue  (1244308, 0, ...
 03657   676   NtContinue  (1244308, 0, ...
 03658   676   NtContinue  (1244308, 0, ...
 03659   676   NtContinue  (1244308, 0, ...
 03660   676   NtContinue  (1244308, 0, ...
 03661   676   NtContinue  (1244308, 0, ...
 03662   676   NtContinue  (1244308, 0, ...
 03663   676   NtContinue  (1244308, 0, ...
 03664   676   NtContinue  (1244308, 0, ...
 03665   676   NtContinue  (1244308, 0, ...
 03666   676   NtContinue  (1244308, 0, ...
 03667   676   NtContinue  (1244308, 0, ...
 03668   676   NtContinue  (1244308, 0, ...
 03669   676   NtContinue  (1244308, 0, ...
 03670   676   NtContinue  (1244308, 0, ...
 03671   676   NtContinue  (1244308, 0, ...
 03672   676   NtContinue  (1244308, 0, ...
 03673   676   NtContinue  (1244308, 0, ...
 03674   676   NtContinue  (1244308, 0, ...
 03675   676   NtContinue  (1244308, 0, ...
 03676   676   NtContinue  (1244308, 0, ...
 03677   676   NtContinue  (1244308, 0, ...
 03678   676   NtContinue  (1244308, 0, ...
 03679   676   NtContinue  (1244308, 0, ...
 03680   676   NtContinue  (1244308, 0, ...
 03681   676   NtContinue  (1244308, 0, ...
 03682   676   NtContinue  (1244308, 0, ...
 03683   676   NtContinue  (1244308, 0, ...
 03684   676   NtContinue  (1244308, 0, ...
 03685   676   NtContinue  (1244308, 0, ...
 03686   676   NtContinue  (1244308, 0, ...
 03687   676   NtContinue  (1244308, 0, ...
 03688   676   NtContinue  (1244308, 0, ...
 03689   676   NtContinue  (1244308, 0, ...
 03690   676   NtContinue  (1244308, 0, ...
 03691   676   NtContinue  (1244308, 0, ...
 03692   676   NtContinue  (1244308, 0, ...
 03693   676   NtContinue  (1244308, 0, ...
 03694   676   NtContinue  (1244308, 0, ...
 03695   676   NtContinue  (1244308, 0, ...
 03696   676   NtContinue  (1244308, 0, ...
 03697   676   NtContinue  (1244308, 0, ...
 03698   676   NtContinue  (1244308, 0, ...
 03699   676   NtContinue  (1244308, 0, ...
 03700   676   NtContinue  (1244308, 0, ...
 03701   676   NtContinue  (1244308, 0, ...
 03702   676   NtContinue  (1244308, 0, ...
 03703   676   NtContinue  (1244308, 0, ...
 03704   676   NtContinue  (1244308, 0, ...
 03705   676   NtContinue  (1244308, 0, ...
 03706   676   NtContinue  (1244308, 0, ...
 03707   676   NtContinue  (1244308, 0, ...
 03708   676   NtContinue  (1244308, 0, ...
 03709   676   NtContinue  (1244308, 0, ...
 03710   676   NtContinue  (1244308, 0, ...
 03711   676   NtContinue  (1244308, 0, ...
 03712   676   NtContinue  (1244308, 0, ...
 03713   676   NtContinue  (1244308, 0, ...
 03714   676   NtContinue  (1244308, 0, ...
 03715   676   NtContinue  (1244308, 0, ...
 03716   676   NtContinue  (1244308, 0, ...
 03717   676   NtContinue  (1244308, 0, ...
 03718   676   NtContinue  (1244308, 0, ...
 03719   676   NtContinue  (1244308, 0, ...
 03720   676   NtContinue  (1244308, 0, ...
 03721   676   NtContinue  (1244308, 0, ...
 03722   676   NtContinue  (1244308, 0, ...
 03723   676   NtContinue  (1244308, 0, ...
 03724   676   NtContinue  (1244308, 0, ...
 03725   676   NtContinue  (1244308, 0, ...
 03726   676   NtContinue  (1244308, 0, ...
 03727   676   NtContinue  (1244308, 0, ...
 03728   676   NtContinue  (1244308, 0, ...
 03729   676   NtContinue  (1244308, 0, ...
 03730   676   NtContinue  (1244308, 0, ...
 03731   676   NtContinue  (1244308, 0, ...
 03732   676   NtContinue  (1244308, 0, ...
 03733   676   NtContinue  (1244308, 0, ...
 03734   676   NtContinue  (1244308, 0, ...
 03735   676   NtContinue  (1244308, 0, ...
 03736   676   NtContinue  (1244308, 0, ...
 03737   676   NtContinue  (1244308, 0, ...
 03738   676   NtContinue  (1244308, 0, ...
 03739   676   NtContinue  (1244308, 0, ...
 03740   676   NtContinue  (1244308, 0, ...
 03741   676   NtContinue  (1244308, 0, ...
 03742   676   NtContinue  (1244308, 0, ...
 03743   676   NtContinue  (1244308, 0, ...
 03744   676   NtContinue  (1244308, 0, ...
 03745   676   NtContinue  (1244308, 0, ...
 03746   676   NtContinue  (1244308, 0, ...
 03747   676   NtContinue  (1244308, 0, ...
 03748   676   NtContinue  (1244308, 0, ...
 03749   676   NtContinue  (1244308, 0, ...
 03750   676   NtContinue  (1244308, 0, ...
 03751   676   NtContinue  (1244308, 0, ...
 03752   676   NtContinue  (1244308, 0, ...
 03753   676   NtContinue  (1244308, 0, ...
 03754   676   NtContinue  (1244308, 0, ...
 03755   676   NtContinue  (1244308, 0, ...
 03756   676   NtContinue  (1244308, 0, ...
 03757   676   NtContinue  (1244308, 0, ...
 03758   676   NtContinue  (1244308, 0, ...
 03759   676   NtContinue  (1244308, 0, ...
 03760   676   NtContinue  (1244308, 0, ...
 03761   676   NtContinue  (1244308, 0, ...
 03762   676   NtContinue  (1244308, 0, ...
 03763   676   NtContinue  (1244308, 0, ...
 03764   676   NtContinue  (1244308, 0, ...
 03765   676   NtContinue  (1244308, 0, ...
 03766   676   NtContinue  (1244308, 0, ...
 03767   676   NtContinue  (1244308, 0, ...
 03768   676   NtContinue  (1244308, 0, ...
 03769   676   NtContinue  (1244308, 0, ...
 03770   676   NtContinue  (1244308, 0, ...
 03771   676   NtContinue  (1244308, 0, ...
 03772   676   NtContinue  (1244308, 0, ...
 03773   676   NtContinue  (1244308, 0, ...
 03774   676   NtContinue  (1244308, 0, ...
 03775   676   NtContinue  (1244308, 0, ...
 03776   676   NtContinue  (1244308, 0, ...
 03777   676   NtContinue  (1244308, 0, ...
 03778   676   NtContinue  (1244308, 0, ...
 03779   676   NtContinue  (1244308, 0, ...
 03780   676   NtContinue  (1244308, 0, ...
 03781   676   NtContinue  (1244308, 0, ...
 03782   676   NtContinue  (1244308, 0, ...
 03783   676   NtContinue  (1244308, 0, ...
 03784   676   NtContinue  (1244308, 0, ...
 03785   676   NtContinue  (1244308, 0, ...
 03786   676   NtContinue  (1244308, 0, ...
 03787   676   NtContinue  (1244308, 0, ...
 03788   676   NtContinue  (1244308, 0, ...
 03789   676   NtContinue  (1244308, 0, ...
 03790   676   NtContinue  (1244308, 0, ...
 03791   676   NtContinue  (1244308, 0, ...
 03792   676   NtContinue  (1244308, 0, ...
 03793   676   NtContinue  (1244308, 0, ...
 03794   676   NtContinue  (1244308, 0, ...
 03795   676   NtContinue  (1244308, 0, ...
 03796   676   NtContinue  (1244308, 0, ...
 03797   676   NtContinue  (1244308, 0, ...
 03798   676   NtContinue  (1244308, 0, ...
 03799   676   NtContinue  (1244308, 0, ...
 03800   676   NtContinue  (1244308, 0, ...
 03801   676   NtContinue  (1244308, 0, ...
 03802   676   NtContinue  (1244308, 0, ...
 03803   676   NtContinue  (1244308, 0, ...
 03804   676   NtContinue  (1244308, 0, ...
 03805   676   NtContinue  (1244308, 0, ...
 03806   676   NtContinue  (1244308, 0, ...
 03807   676   NtContinue  (1244308, 0, ...
 03808   676   NtContinue  (1244308, 0, ...
 03809   676   NtContinue  (1244308, 0, ...
 03810   676   NtContinue  (1244308, 0, ...
 03811   676   NtContinue  (1244308, 0, ...
 03812   676   NtContinue  (1244308, 0, ...
 03813   676   NtContinue  (1244308, 0, ...
 03814   676   NtContinue  (1244308, 0, ...
 03815   676   NtContinue  (1244308, 0, ...
 03816   676   NtContinue  (1244308, 0, ...
 03817   676   NtContinue  (1244308, 0, ...
 03818   676   NtContinue  (1244308, 0, ...
 03819   676   NtContinue  (1244308, 0, ...
 03820   676   NtContinue  (1244308, 0, ...
 03821   676   NtContinue  (1244308, 0, ...
 03822   676   NtContinue  (1244308, 0, ...
 03823   676   NtContinue  (1244308, 0, ...
 03824   676   NtContinue  (1244308, 0, ...
 03825   676   NtContinue  (1244308, 0, ...
 03826   676   NtContinue  (1244308, 0, ...
 03827   676   NtContinue  (1244308, 0, ...
 03828   676   NtContinue  (1244308, 0, ...
 03829   676   NtContinue  (1244308, 0, ...
 03830   676   NtContinue  (1244308, 0, ...
 03831   676   NtContinue  (1244308, 0, ...
 03832   676   NtContinue  (1244308, 0, ...
 03833   676   NtContinue  (1244308, 0, ...
 03834   676   NtContinue  (1244308, 0, ...
 03835   676   NtContinue  (1244308, 0, ...
 03836   676   NtContinue  (1244308, 0, ...
 03837   676   NtContinue  (1244308, 0, ...
 03838   676   NtContinue  (1244308, 0, ...
 03839   676   NtContinue  (1244308, 0, ...
 03840   676   NtContinue  (1244308, 0, ...
 03841   676   NtContinue  (1244308, 0, ...
 03842   676   NtContinue  (1244308, 0, ...
 03843   676   NtContinue  (1244308, 0, ...
 03844   676   NtContinue  (1244308, 0, ...
 03845   676   NtContinue  (1244308, 0, ...
 03846   676   NtContinue  (1244308, 0, ...
 03847   676   NtContinue  (1244308, 0, ...
 03848   676   NtContinue  (1244308, 0, ...
 03849   676   NtContinue  (1244308, 0, ...
 03850   676   NtContinue  (1244308, 0, ...
 03851   676   NtContinue  (1244308, 0, ...
 03852   676   NtContinue  (1244308, 0, ...
 03853   676   NtContinue  (1244308, 0, ...
 03854   676   NtContinue  (1244308, 0, ...
 03855   676   NtContinue  (1244308, 0, ...
 03856   676   NtContinue  (1244308, 0, ...
 03857   676   NtContinue  (1244308, 0, ...
 03858   676   NtContinue  (1244308, 0, ...
 03859   676   NtContinue  (1244308, 0, ...
 03860   676   NtContinue  (1244308, 0, ...
 03861   676   NtContinue  (1244308, 0, ...
 03862   676   NtContinue  (1244308, 0, ...
 03863   676   NtContinue  (1244308, 0, ...
 03864   676   NtContinue  (1244308, 0, ...
 03865   676   NtContinue  (1244308, 0, ...
 03866   676   NtContinue  (1244308, 0, ...
 03867   676   NtContinue  (1244308, 0, ...
 03868   676   NtContinue  (1244308, 0, ...
 03869   676   NtContinue  (1244308, 0, ...
 03870   676   NtContinue  (1244308, 0, ...
 03871   676   NtContinue  (1244308, 0, ...
 03872   676   NtContinue  (1244308, 0, ...
 03873   676   NtContinue  (1244308, 0, ...
 03874   676   NtContinue  (1244308, 0, ...
 03875   676   NtContinue  (1244308, 0, ...
 03876   676   NtContinue  (1244308, 0, ...
 03877   676   NtContinue  (1244308, 0, ...
 03878   676   NtContinue  (1244308, 0, ...
 03879   676   NtContinue  (1244308, 0, ...
 03880   676   NtContinue  (1244308, 0, ...
 03881   676   NtContinue  (1244308, 0, ...
 03882   676   NtContinue  (1244308, 0, ...
 03883   676   NtContinue  (1244308, 0, ...
 03884   676   NtContinue  (1244308, 0, ...
 03885   676   NtContinue  (1244308, 0, ...
 03886   676   NtContinue  (1244308, 0, ...
 03887   676   NtContinue  (1244308, 0, ...
 03888   676   NtContinue  (1244308, 0, ...
 03889   676   NtContinue  (1244308, 0, ...
 03890   676   NtContinue  (1244308, 0, ...
 03891   676   NtContinue  (1244308, 0, ...
 03892   676   NtContinue  (1244308, 0, ...
 03893   676   NtContinue  (1244308, 0, ...
 03894   676   NtContinue  (1244308, 0, ...
 03895   676   NtContinue  (1244308, 0, ...
 03896   676   NtContinue  (1244308, 0, ...
 03897   676   NtContinue  (1244308, 0, ...
 03898   676   NtContinue  (1244308, 0, ...
 03899   676   NtContinue  (1244308, 0, ...
 03900   676   NtContinue  (1244308, 0, ...
 03901   676   NtContinue  (1244308, 0, ...
 03902   676   NtContinue  (1244308, 0, ...
 03903   676   NtContinue  (1244308, 0, ...
 03904   676   NtContinue  (1244308, 0, ...
 03905   676   NtContinue  (1244308, 0, ...
 03906   676   NtContinue  (1244308, 0, ...
 03907   676   NtContinue  (1244308, 0, ...
 03908   676   NtContinue  (1244308, 0, ...
 03909   676   NtContinue  (1244308, 0, ...
 03910   676   NtContinue  (1244308, 0, ...
 03911   676   NtContinue  (1244308, 0, ...
 03912   676   NtContinue  (1244308, 0, ...
 03913   676   NtContinue  (1244308, 0, ...
 03914   676   NtContinue  (1244308, 0, ...
 03915   676   NtContinue  (1244308, 0, ...
 03916   676   NtContinue  (1244308, 0, ...
 03917   676   NtContinue  (1244308, 0, ...
 03918   676   NtContinue  (1244308, 0, ...
 03919   676   NtContinue  (1244308, 0, ...
 03920   676   NtContinue  (1244308, 0, ...
 03921   676   NtContinue  (1244308, 0, ...
 03922   676   NtContinue  (1244308, 0, ...
 03923   676   NtContinue  (1244308, 0, ...
 03924   676   NtContinue  (1244308, 0, ...
 03925   676   NtContinue  (1244308, 0, ...
 03926   676   NtContinue  (1244308, 0, ...
 03927   676   NtContinue  (1244308, 0, ...
 03928   676   NtContinue  (1244308, 0, ...
 03929   676   NtContinue  (1244308, 0, ...
 03930   676   NtContinue  (1244308, 0, ...
 03931   676   NtContinue  (1244308, 0, ...
 03932   676   NtContinue  (1244308, 0, ...
 03933   676   NtContinue  (1244308, 0, ...
 03934   676   NtContinue  (1244308, 0, ...
 03935   676   NtContinue  (1244308, 0, ...
 03936   676   NtContinue  (1244308, 0, ...
 03937   676   NtContinue  (1244308, 0, ...
 03938   676   NtContinue  (1244308, 0, ...
 03939   676   NtContinue  (1244308, 0, ...
 03940   676   NtContinue  (1244308, 0, ...
 03941   676   NtContinue  (1244308, 0, ...
 03942   676   NtContinue  (1244308, 0, ...
 03943   676   NtContinue  (1244308, 0, ...
 03944   676   NtContinue  (1244308, 0, ...
 03945   676   NtContinue  (1244308, 0, ...
 03946   676   NtContinue  (1244308, 0, ...
 03947   676   NtContinue  (1244308, 0, ...
 03948   676   NtContinue  (1244308, 0, ...
 03949   676   NtContinue  (1244308, 0, ...
 03950   676   NtContinue  (1244308, 0, ...
 03951   676   NtContinue  (1244308, 0, ...
 03952   676   NtContinue  (1244308, 0, ...
 03953   676   NtContinue  (1244308, 0, ...
 03954   676   NtContinue  (1244308, 0, ...
 03955   676   NtContinue  (1244308, 0, ...
 03956   676   NtContinue  (1244308, 0, ...
 03957   676   NtContinue  (1244308, 0, ...
 03958   676   NtContinue  (1244308, 0, ...
 03959   676   NtContinue  (1244308, 0, ...
 03960   676   NtContinue  (1244308, 0, ...
 03961   676   NtContinue  (1244308, 0, ...
 03962   676   NtContinue  (1244308, 0, ...
 03963   676   NtContinue  (1244308, 0, ...
 03964   676   NtContinue  (1244308, 0, ...
 03965   676   NtContinue  (1244308, 0, ...
 03966   676   NtContinue  (1244308, 0, ...
 03967   676   NtContinue  (1244308, 0, ...
 03968   676   NtContinue  (1244308, 0, ...
 03969   676   NtContinue  (1244308, 0, ...
 03970   676   NtContinue  (1244308, 0, ...
 03971   676   NtContinue  (1244308, 0, ...
 03972   676   NtContinue  (1244308, 0, ...
 03973   676   NtContinue  (1244308, 0, ...
 03974   676   NtContinue  (1244308, 0, ...
 03975   676   NtContinue  (1244308, 0, ...
 03976   676   NtContinue  (1244308, 0, ...
 03977   676   NtContinue  (1244308, 0, ...
 03978   676   NtContinue  (1244308, 0, ...
 03979   676   NtContinue  (1244308, 0, ...
 03980   676   NtContinue  (1244308, 0, ...
 03981   676   NtContinue  (1244308, 0, ...
 03982   676   NtContinue  (1244308, 0, ...
 03983   676   NtContinue  (1244308, 0, ...
 03984   676   NtContinue  (1244308, 0, ...
 03985   676   NtContinue  (1244308, 0, ...
 03986   676   NtContinue  (1244308, 0, ...
 03987   676   NtContinue  (1244308, 0, ...
 03988   676   NtContinue  (1244308, 0, ...
 03989   676   NtContinue  (1244308, 0, ...
 03990   676   NtContinue  (1244308, 0, ...
 03991   676   NtContinue  (1244308, 0, ...
 03992   676   NtContinue  (1244308, 0, ...
 03993   676   NtContinue  (1244308, 0, ...
 03994   676   NtContinue  (1244308, 0, ...
 03995   676   NtContinue  (1244308, 0, ...
 03996   676   NtContinue  (1244308, 0, ...
 03997   676   NtContinue  (1244308, 0, ...
 03998   676   NtContinue  (1244308, 0, ...
 03999   676   NtContinue  (1244308, 0, ...
 04000   676   NtContinue  (1244308, 0, ...
 04001   676   NtContinue  (1244308, 0, ...
 04002   676   NtContinue  (1244308, 0, ...
 04003   676   NtContinue  (1244308, 0, ...
 04004   676   NtContinue  (1244308, 0, ...
 04005   676   NtContinue  (1244308, 0, ...
 04006   676   NtContinue  (1244308, 0, ...
 04007   676   NtContinue  (1244308, 0, ...
 04008   676   NtContinue  (1244308, 0, ...
 04009   676   NtContinue  (1244308, 0, ...
 04010   676   NtContinue  (1244308, 0, ...
 04011   676   NtContinue  (1244308, 0, ...
 04012   676   NtContinue  (1244308, 0, ...
 04013   676   NtContinue  (1244308, 0, ...
 04014   676   NtContinue  (1244308, 0, ...
 04015   676   NtContinue  (1244308, 0, ...
 04016   676   NtContinue  (1244308, 0, ...
 04017   676   NtContinue  (1244308, 0, ...
 04018   676   NtContinue  (1244308, 0, ...
 04019   676   NtContinue  (1244308, 0, ...
 04020   676   NtContinue  (1244308, 0, ...
 04021   676   NtContinue  (1244308, 0, ...
 04022   676   NtContinue  (1244308, 0, ...
 04023   676   NtContinue  (1244308, 0, ...
 04024   676   NtContinue  (1244308, 0, ...
 04025   676   NtContinue  (1244308, 0, ...
 04026   676   NtContinue  (1244308, 0, ...
 04027   676   NtContinue  (1244308, 0, ...
 04028   676   NtContinue  (1244308, 0, ...
 04029   676   NtContinue  (1244308, 0, ...
 04030   676   NtContinue  (1244308, 0, ...
 04031   676   NtContinue  (1244308, 0, ...
 04032   676   NtContinue  (1244308, 0, ...
 04033   676   NtContinue  (1244308, 0, ...
 04034   676   NtContinue  (1244308, 0, ...
 04035   676   NtContinue  (1244308, 0, ...
 04036   676   NtContinue  (1244308, 0, ...
 04037   676   NtContinue  (1244308, 0, ...
 04038   676   NtContinue  (1244308, 0, ...
 04039   676   NtContinue  (1244308, 0, ...
 04040   676   NtContinue  (1244308, 0, ...
 04041   676   NtContinue  (1244308, 0, ...
 04042   676   NtContinue  (1244308, 0, ...
 04043   676   NtContinue  (1244308, 0, ...
 04044   676   NtContinue  (1244308, 0, ...
 04045   676   NtContinue  (1244308, 0, ...
 04046   676   NtContinue  (1244308, 0, ...
 04047   676   NtContinue  (1244308, 0, ...
 04048   676   NtContinue  (1244308, 0, ...
 04049   676   NtContinue  (1244308, 0, ...
 04050   676   NtContinue  (1244308, 0, ...
 04051   676   NtContinue  (1244308, 0, ...
 04052   676   NtContinue  (1244308, 0, ...
 04053   676   NtContinue  (1244308, 0, ...
 04054   676   NtContinue  (1244308, 0, ...
 04055   676   NtContinue  (1244308, 0, ...
 04056   676   NtContinue  (1244308, 0, ...
 04057   676   NtContinue  (1244308, 0, ...
 04058   676   NtContinue  (1244308, 0, ...
 04059   676   NtContinue  (1244308, 0, ...
 04060   676   NtContinue  (1244308, 0, ...
 04061   676   NtContinue  (1244308, 0, ...
 04062   676   NtContinue  (1244308, 0, ...
 04063   676   NtContinue  (1244308, 0, ...
 04064   676   NtContinue  (1244308, 0, ...
 04065   676   NtContinue  (1244308, 0, ...
 04066   676   NtContinue  (1244308, 0, ...
 04067   676   NtContinue  (1244308, 0, ...
 04068   676   NtContinue  (1244308, 0, ...
 04069   676   NtContinue  (1244308, 0, ...
 04070   676   NtContinue  (1244308, 0, ...
 04071   676   NtContinue  (1244308, 0, ...
 04072   676   NtContinue  (1244308, 0, ...
 04073   676   NtContinue  (1244308, 0, ...
 04074   676   NtContinue  (1244308, 0, ...
 04075   676   NtContinue  (1244308, 0, ...
 04076   676   NtContinue  (1244308, 0, ...
 04077   676   NtContinue  (1244308, 0, ...
 04078   676   NtContinue  (1244308, 0, ...
 04079   676   NtContinue  (1244308, 0, ...
 04080   676   NtContinue  (1244308, 0, ...
 04081   676   NtContinue  (1244308, 0, ...
 04082   676   NtContinue  (1244308, 0, ...
 04083   676   NtContinue  (1244308, 0, ...
 04084   676   NtContinue  (1244308, 0, ...
 04085   676   NtContinue  (1244308, 0, ...
 04086   676   NtContinue  (1244308, 0, ...
 04087   676   NtContinue  (1244308, 0, ...
 04088   676   NtContinue  (1244308, 0, ...
 04089   676   NtContinue  (1244308, 0, ...
 04090   676   NtContinue  (1244308, 0, ...
 04091   676   NtContinue  (1244308, 0, ...
 04092   676   NtContinue  (1244308, 0, ...
 04093   676   NtContinue  (1244308, 0, ...
 04094   676   NtContinue  (1244308, 0, ...
 04095   676   NtContinue  (1244308, 0, ...
 04096   676   NtContinue  (1244308, 0, ...
 04097   676   NtContinue  (1244308, 0, ...
 04098   676   NtContinue  (1244308, 0, ...
 04099   676   NtContinue  (1244308, 0, ...
 04100   676   NtContinue  (1244308, 0, ...
 04101   676   NtContinue  (1244308, 0, ...
 04102   676   NtContinue  (1244308, 0, ...
 04103   676   NtContinue  (1244308, 0, ...
 04104   676   NtContinue  (1244308, 0, ...
 04105   676   NtContinue  (1244308, 0, ...
 04106   676   NtContinue  (1244308, 0, ...
 04107   676   NtContinue  (1244308, 0, ...
 04108   676   NtContinue  (1244308, 0, ...
 04109   676   NtContinue  (1244308, 0, ...
 04110   676   NtContinue  (1244308, 0, ...
 04111   676   NtContinue  (1244308, 0, ...
 04112   676   NtContinue  (1244308, 0, ...
 04113   676   NtContinue  (1244308, 0, ...
 04114   676   NtContinue  (1244308, 0, ...
 04115   676   NtContinue  (1244308, 0, ...
 04116   676   NtContinue  (1244308, 0, ...
 04117   676   NtContinue  (1244308, 0, ...
 04118   676   NtContinue  (1244308, 0, ...
 04119   676   NtContinue  (1244308, 0, ...
 04120   676   NtContinue  (1244308, 0, ...
 04121   676   NtContinue  (1244308, 0, ...
 04122   676   NtContinue  (1244308, 0, ...
 04123   676   NtContinue  (1244308, 0, ...
 04124   676   NtContinue  (1244308, 0, ...
 04125   676   NtContinue  (1244308, 0, ...
 04126   676   NtContinue  (1244308, 0, ...
 04127   676   NtContinue  (1244308, 0, ...
 04128   676   NtContinue  (1244308, 0, ...
 04129   676   NtContinue  (1244308, 0, ...
 04130   676   NtContinue  (1244308, 0, ...
 04131   676   NtContinue  (1244308, 0, ...
 04132   676   NtContinue  (1244308, 0, ...
 04133   676   NtContinue  (1244308, 0, ...
 04134   676   NtContinue  (1244308, 0, ...
 04135   676   NtContinue  (1244308, 0, ...
 04136   676   NtContinue  (1244308, 0, ...
 04137   676   NtContinue  (1244308, 0, ...
 04138   676   NtContinue  (1244308, 0, ...
 04139   676   NtContinue  (1244308, 0, ...
 04140   676   NtContinue  (1244308, 0, ...
 04141   676   NtContinue  (1244308, 0, ...
 04142   676   NtContinue  (1244308, 0, ...
 04143   676   NtContinue  (1244308, 0, ...
 04144   676   NtContinue  (1244308, 0, ...
 04145   676   NtContinue  (1244308, 0, ...
 04146   676   NtContinue  (1244308, 0, ...
 04147   676   NtContinue  (1244308, 0, ...
 04148   676   NtContinue  (1244308, 0, ...
 04149   676   NtContinue  (1244308, 0, ...
 04150   676   NtContinue  (1244308, 0, ...
 04151   676   NtContinue  (1244308, 0, ...
 04152   676   NtContinue  (1244308, 0, ...
 04153   676   NtContinue  (1244308, 0, ...
 04154   676   NtContinue  (1244308, 0, ...
 04155   676   NtContinue  (1244308, 0, ...
 04156   676   NtContinue  (1244308, 0, ...
 04157   676   NtContinue  (1244308, 0, ...
 04158   676   NtContinue  (1244308, 0, ...
 04159   676   NtContinue  (1244308, 0, ...
 04160   676   NtContinue  (1244308, 0, ...
 04161   676   NtContinue  (1244308, 0, ...
 04162   676   NtContinue  (1244308, 0, ...
 04163   676   NtContinue  (1244308, 0, ...
 04164   676   NtContinue  (1244308, 0, ...
 04165   676   NtContinue  (1244308, 0, ...
 04166   676   NtContinue  (1244308, 0, ...
 04167   676   NtContinue  (1244308, 0, ...
 04168   676   NtContinue  (1244308, 0, ...
 04169   676   NtContinue  (1244308, 0, ...
 04170   676   NtContinue  (1244308, 0, ...
 04171   676   NtContinue  (1244308, 0, ...
 04172   676   NtContinue  (1244308, 0, ...
 04173   676   NtContinue  (1244308, 0, ...
 04174   676   NtContinue  (1244308, 0, ...
 04175   676   NtContinue  (1244308, 0, ...
 04176   676   NtContinue  (1244308, 0, ...
 04177   676   NtContinue  (1244308, 0, ...
 04178   676   NtContinue  (1244308, 0, ...
 04179   676   NtContinue  (1244308, 0, ...
 04180   676   NtContinue  (1244308, 0, ...
 04181   676   NtContinue  (1244308, 0, ...
 04182   676   NtContinue  (1244308, 0, ...
 04183   676   NtContinue  (1244308, 0, ...
 04184   676   NtContinue  (1244308, 0, ...
 04185   676   NtContinue  (1244308, 0, ...
 04186   676   NtContinue  (1244308, 0, ...
 04187   676   NtContinue  (1244308, 0, ...
 04188   676   NtContinue  (1244308, 0, ...
 04189   676   NtContinue  (1244308, 0, ...
 04190   676   NtContinue  (1244308, 0, ...
 04191   676   NtContinue  (1244308, 0, ...
 04192   676   NtContinue  (1244308, 0, ...
 04193   676   NtContinue  (1244308, 0, ...
 04194   676   NtContinue  (1244308, 0, ...
 04195   676   NtContinue  (1244308, 0, ...
 04196   676   NtContinue  (1244308, 0, ...
 04197   676   NtContinue  (1244308, 0, ...
 04198   676   NtContinue  (1244308, 0, ...
 04199   676   NtContinue  (1244308, 0, ...
 04200   676   NtContinue  (1244308, 0, ...
 04201   676   NtContinue  (1244308, 0, ...
 04202   676   NtContinue  (1244308, 0, ...
 04203   676   NtContinue  (1244308, 0, ...
 04204   676   NtContinue  (1244308, 0, ...
 04205   676   NtContinue  (1244308, 0, ...
 04206   676   NtContinue  (1244308, 0, ...
 04207   676   NtContinue  (1244308, 0, ...
 04208   676   NtContinue  (1244308, 0, ...
 04209   676   NtContinue  (1244308, 0, ...
 04210   676   NtContinue  (1244308, 0, ...
 04211   676   NtContinue  (1244308, 0, ...
 04212   676   NtContinue  (1244308, 0, ...
 04213   676   NtContinue  (1244308, 0, ...
 04214   676   NtContinue  (1244308, 0, ...
 04215   676   NtContinue  (1244308, 0, ...
 04216   676   NtContinue  (1244308, 0, ...
 04217   676   NtContinue  (1244308, 0, ...
 04218   676   NtContinue  (1244308, 0, ...
 04219   676   NtContinue  (1244308, 0, ...
 04220   676   NtContinue  (1244308, 0, ...
 04221   676   NtContinue  (1244308, 0, ...
 04222   676   NtContinue  (1244308, 0, ...
 04223   676   NtContinue  (1244308, 0, ...
 04224   676   NtContinue  (1244308, 0, ...
 04225   676   NtContinue  (1244308, 0, ...
 04226   676   NtContinue  (1244308, 0, ...
 04227   676   NtContinue  (1244308, 0, ...
 04228   676   NtContinue  (1244308, 0, ...
 04229   676   NtContinue  (1244308, 0, ...
 04230   676   NtContinue  (1244308, 0, ...
 04231   676   NtContinue  (1244308, 0, ...
 04232   676   NtContinue  (1244308, 0, ...
 04233   676   NtContinue  (1244308, 0, ...
 04234   676   NtContinue  (1244308, 0, ...
 04235   676   NtContinue  (1244308, 0, ...
 04236   676   NtContinue  (1244308, 0, ...
 04237   676   NtContinue  (1244308, 0, ...
 04238   676   NtContinue  (1244308, 0, ...
 04239   676   NtContinue  (1244308, 0, ...
 04240   676   NtContinue  (1244308, 0, ...
 04241   676   NtContinue  (1244308, 0, ...
 04242   676   NtContinue  (1244308, 0, ...
 04243   676   NtContinue  (1244308, 0, ...
 04244   676   NtContinue  (1244308, 0, ...
 04245   676   NtContinue  (1244308, 0, ...
 04246   676   NtContinue  (1244308, 0, ...
 04247   676   NtContinue  (1244308, 0, ...
 04248   676   NtContinue  (1244308, 0, ...
 04249   676   NtContinue  (1244308, 0, ...
 04250   676   NtContinue  (1244308, 0, ...
 04251   676   NtContinue  (1244308, 0, ...
 04252   676   NtContinue  (1244308, 0, ...
 04253   676   NtContinue  (1244308, 0, ...
 04254   676   NtContinue  (1244308, 0, ...
 04255   676   NtContinue  (1244308, 0, ...
 04256   676   NtContinue  (1244308, 0, ...
 04257   676   NtContinue  (1244308, 0, ...
 04258   676   NtContinue  (1244308, 0, ...
 04259   676   NtContinue  (1244308, 0, ...
 04260   676   NtContinue  (1244308, 0, ...
 04261   676   NtContinue  (1244308, 0, ...
 04262   676   NtContinue  (1244308, 0, ...
 04263   676   NtContinue  (1244308, 0, ...
 04264   676   NtContinue  (1244308, 0, ...
 04265   676   NtContinue  (1244308, 0, ...
 04266   676   NtContinue  (1244308, 0, ...
 04267   676   NtContinue  (1244308, 0, ...
 04268   676   NtContinue  (1244308, 0, ...
 04269   676   NtContinue  (1244308, 0, ...
 04270   676   NtContinue  (1244308, 0, ...
 04271   676   NtContinue  (1244308, 0, ...
 04272   676   NtContinue  (1244308, 0, ...
 04273   676   NtContinue  (1244308, 0, ...
 04274   676   NtContinue  (1244308, 0, ...
 04275   676   NtContinue  (1244308, 0, ...
 04276   676   NtContinue  (1244308, 0, ...
 04277   676   NtContinue  (1244308, 0, ...
 04278   676   NtContinue  (1244308, 0, ...
 04279   676   NtContinue  (1244308, 0, ...
 04280   676   NtContinue  (1244308, 0, ...
 04281   676   NtContinue  (1244308, 0, ...
 04282   676   NtContinue  (1244308, 0, ...
 04283   676   NtContinue  (1244308, 0, ...
 04284   676   NtContinue  (1244308, 0, ...
 04285   676   NtContinue  (1244308, 0, ...
 04286   676   NtContinue  (1244308, 0, ...
 04287   676   NtContinue  (1244308, 0, ...
 04288   676   NtContinue  (1244308, 0, ...
 04289   676   NtContinue  (1244308, 0, ...
 04290   676   NtContinue  (1244308, 0, ...
 04291   676   NtContinue  (1244308, 0, ...
 04292   676   NtContinue  (1244308, 0, ...
 04293   676   NtContinue  (1244308, 0, ...
 04294   676   NtContinue  (1244308, 0, ...
 04295   676   NtContinue  (1244308, 0, ...
 04296   676   NtContinue  (1244308, 0, ...
 04297   676   NtContinue  (1244308, 0, ...
 04298   676   NtContinue  (1244308, 0, ...
 04299   676   NtContinue  (1244308, 0, ...
 04300   676   NtContinue  (1244308, 0, ...
 04301   676   NtContinue  (1244308, 0, ...
 04302   676   NtContinue  (1244308, 0, ...
 04303   676   NtContinue  (1244308, 0, ...
 04304   676   NtContinue  (1244308, 0, ...
 04305   676   NtContinue  (1244308, 0, ...
 04306   676   NtContinue  (1244308, 0, ...
 04307   676   NtContinue  (1244308, 0, ...
 04308   676   NtContinue  (1244308, 0, ...
 04309   676   NtContinue  (1244308, 0, ...
 04310   676   NtContinue  (1244308, 0, ...
 04311   676   NtContinue  (1244308, 0, ...
 04312   676   NtContinue  (1244308, 0, ...
 04313   676   NtContinue  (1244308, 0, ...
 04314   676   NtContinue  (1244308, 0, ...
 04315   676   NtContinue  (1244308, 0, ...
 04316   676   NtContinue  (1244308, 0, ...
 04317   676   NtContinue  (1244308, 0, ...
 04318   676   NtContinue  (1244308, 0, ...
 04319   676   NtContinue  (1244308, 0, ...
 04320   676   NtContinue  (1244308, 0, ...
 04321   676   NtContinue  (1244308, 0, ...
 04322   676   NtContinue  (1244308, 0, ...
 04323   676   NtContinue  (1244308, 0, ...
 04324   676   NtContinue  (1244308, 0, ...
 04325   676   NtContinue  (1244308, 0, ...
 04326   676   NtContinue  (1244308, 0, ...
 04327   676   NtContinue  (1244308, 0, ...
 04328   676   NtContinue  (1244308, 0, ...
 04329   676   NtContinue  (1244308, 0, ...
 04330   676   NtContinue  (1244308, 0, ...
 04331   676   NtContinue  (1244308, 0, ...
 04332   676   NtContinue  (1244308, 0, ...
 04333   676   NtContinue  (1244308, 0, ...
 04334   676   NtContinue  (1244308, 0, ...
 04335   676   NtContinue  (1244308, 0, ...
 04336   676   NtContinue  (1244308, 0, ...
 04337   676   NtContinue  (1244308, 0, ...
 04338   676   NtContinue  (1244308, 0, ...
 04339   676   NtContinue  (1244308, 0, ...
 04340   676   NtContinue  (1244308, 0, ...
 04341   676   NtContinue  (1244308, 0, ...
 04342   676   NtContinue  (1244308, 0, ...
 04343   676   NtContinue  (1244308, 0, ...
 04344   676   NtContinue  (1244308, 0, ...
 04345   676   NtContinue  (1244308, 0, ...
 04346   676   NtContinue  (1244308, 0, ...
 04347   676   NtContinue  (1244308, 0, ...
 04348   676   NtContinue  (1244308, 0, ...
 04349   676   NtContinue  (1244308, 0, ...
 04350   676   NtContinue  (1244308, 0, ...
 04351   676   NtContinue  (1244308, 0, ...
 04352   676   NtContinue  (1244308, 0, ...
 04353   676   NtContinue  (1244308, 0, ...
 04354   676   NtContinue  (1244308, 0, ...
 04355   676   NtContinue  (1244308, 0, ...
 04356   676   NtContinue  (1244308, 0, ...
 04357   676   NtContinue  (1244308, 0, ...
 04358   676   NtContinue  (1244308, 0, ...
 04359   676   NtContinue  (1244308, 0, ...
 04360   676   NtContinue  (1244308, 0, ...
 04361   676   NtContinue  (1244308, 0, ...
 04362   676   NtContinue  (1244308, 0, ...
 04363   676   NtContinue  (1244308, 0, ...
 04364   676   NtContinue  (1244308, 0, ...
 04365   676   NtContinue  (1244308, 0, ...
 04366   676   NtContinue  (1244308, 0, ...
 04367   676   NtContinue  (1244308, 0, ...
 04368   676   NtContinue  (1244308, 0, ...
 04369   676   NtContinue  (1244308, 0, ...
 04370   676   NtContinue  (1244308, 0, ...
 04371   676   NtContinue  (1244308, 0, ...
 04372   676   NtContinue  (1244308, 0, ...
 04373   676   NtContinue  (1244308, 0, ...
 04374   676   NtContinue  (1244308, 0, ...
 04375   676   NtContinue  (1244308, 0, ...
 04376   676   NtContinue  (1244308, 0, ...
 04377   676   NtContinue  (1244308, 0, ...
 04378   676   NtContinue  (1244308, 0, ...
 04379   676   NtContinue  (1244308, 0, ...
 04380   676   NtContinue  (1244308, 0, ...
 04381   676   NtContinue  (1244308, 0, ...
 04382   676   NtContinue  (1244308, 0, ...
 04383   676   NtContinue  (1244308, 0, ...
 04384   676   NtContinue  (1244308, 0, ...
 04385   676   NtContinue  (1244308, 0, ...
 04386   676   NtContinue  (1244308, 0, ...
 04387   676   NtContinue  (1244308, 0, ...
 04388   676   NtContinue  (1244308, 0, ...
 04389   676   NtContinue  (1244308, 0, ...
 04390   676   NtContinue  (1244308, 0, ...
 04391   676   NtContinue  (1244308, 0, ...
 04392   676   NtContinue  (1244308, 0, ...
 04393   676   NtContinue  (1244308, 0, ...
 04394   676   NtContinue  (1244308, 0, ...
 04395   676   NtContinue  (1244308, 0, ...
 04396   676   NtContinue  (1244308, 0, ...
 04397   676   NtContinue  (1244308, 0, ...
 04398   676   NtContinue  (1244308, 0, ...
 04399   676   NtContinue  (1244308, 0, ...
 04400   676   NtContinue  (1244308, 0, ...
 04401   676   NtContinue  (1244308, 0, ...
 04402   676   NtContinue  (1244308, 0, ...
 04403   676   NtContinue  (1244308, 0, ...
 04404   676   NtContinue  (1244308, 0, ...
 04405   676   NtContinue  (1244308, 0, ...
 04406   676   NtContinue  (1244308, 0, ...
 04407   676   NtContinue  (1244308, 0, ...
 04408   676   NtContinue  (1244308, 0, ...
 04409   676   NtContinue  (1244308, 0, ...
 04410   676   NtContinue  (1244308, 0, ...
 04411   676   NtContinue  (1244308, 0, ...
 04412   676   NtContinue  (1244308, 0, ...
 04413   676   NtContinue  (1244308, 0, ...
 04414   676   NtContinue  (1244308, 0, ...
 04415   676   NtContinue  (1244308, 0, ...
 04416   676   NtContinue  (1244308, 0, ...
 04417   676   NtContinue  (1244308, 0, ...
 04418   676   NtContinue  (1244308, 0, ...
 04419   676   NtContinue  (1244308, 0, ...
 04420   676   NtContinue  (1244308, 0, ...
 04421   676   NtContinue  (1244308, 0, ...
 04422   676   NtContinue  (1244308, 0, ...
 04423   676   NtContinue  (1244308, 0, ...
 04424   676   NtContinue  (1244308, 0, ...
 04425   676   NtContinue  (1244308, 0, ...
 04426   676   NtContinue  (1244308, 0, ...
 04427   676   NtContinue  (1244308, 0, ...
 04428   676   NtContinue  (1244308, 0, ...
 04429   676   NtContinue  (1244308, 0, ...
 04430   676   NtContinue  (1244308, 0, ...
 04431   676   NtContinue  (1244308, 0, ...
 04432   676   NtContinue  (1244308, 0, ...
 04433   676   NtContinue  (1244308, 0, ...
 04434   676   NtContinue  (1244308, 0, ...
 04435   676   NtContinue  (1244308, 0, ...
 04436   676   NtContinue  (1244308, 0, ...
 04437   676   NtContinue  (1244308, 0, ...
 04438   676   NtContinue  (1244308, 0, ...
 04439   676   NtContinue  (1244308, 0, ...
 04440   676   NtContinue  (1244308, 0, ...
 04441   676   NtContinue  (1244308, 0, ...
 04442   676   NtContinue  (1244308, 0, ...
 04443   676   NtContinue  (1244308, 0, ...
 04444   676   NtContinue  (1244308, 0, ...
 04445   676   NtContinue  (1244308, 0, ...
 04446   676   NtContinue  (1244308, 0, ...
 04447   676   NtContinue  (1244308, 0, ...
 04448   676   NtContinue  (1244308, 0, ...
 04449   676   NtContinue  (1244308, 0, ...
 04450   676   NtContinue  (1244308, 0, ...
 04451   676   NtContinue  (1244308, 0, ...
 04452   676   NtContinue  (1244308, 0, ...
 04453   676   NtContinue  (1244308, 0, ...
 04454   676   NtContinue  (1244308, 0, ...
 04455   676   NtContinue  (1244308, 0, ...
 04456   676   NtContinue  (1244308, 0, ...
 04457   676   NtContinue  (1244308, 0, ...
 04458   676   NtContinue  (1244308, 0, ...
 04459   676   NtContinue  (1244308, 0, ...
 04460   676   NtContinue  (1244308, 0, ...
 04461   676   NtContinue  (1244308, 0, ...
 04462   676   NtContinue  (1244308, 0, ...
 04463   676   NtContinue  (1244308, 0, ...
 04464   676   NtContinue  (1244308, 0, ...
 04465   676   NtContinue  (1244308, 0, ...
 04466   676   NtContinue  (1244308, 0, ...
 04467   676   NtContinue  (1244308, 0, ...
 04468   676   NtContinue  (1244308, 0, ...
 04469   676   NtContinue  (1244308, 0, ...
 04470   676   NtContinue  (1244308, 0, ...
 04471   676   NtContinue  (1244308, 0, ...
 04472   676   NtContinue  (1244308, 0, ...
 04473   676   NtContinue  (1244308, 0, ...
 04474   676   NtContinue  (1244308, 0, ...
 04475   676   NtContinue  (1244308, 0, ...
 04476   676   NtContinue  (1244308, 0, ...
 04477   676   NtContinue  (1244308, 0, ...
 04478   676   NtContinue  (1244308, 0, ...
 04479   676   NtContinue  (1244308, 0, ...
 04480   676   NtContinue  (1244308, 0, ...
 04481   676   NtContinue  (1244308, 0, ...
 04482   676   NtContinue  (1244308, 0, ...
 04483   676   NtContinue  (1244308, 0, ...
 04484   676   NtContinue  (1244308, 0, ...
 04485   676   NtContinue  (1244308, 0, ...
 04486   676   NtContinue  (1244308, 0, ...
 04487   676   NtContinue  (1244308, 0, ...
 04488   676   NtContinue  (1244308, 0, ...
 04489   676   NtContinue  (1244308, 0, ...
 04490   676   NtContinue  (1244308, 0, ...
 04491   676   NtContinue  (1244308, 0, ...
 04492   676   NtContinue  (1244308, 0, ...
 04493   676   NtContinue  (1244308, 0, ...
 04494   676   NtContinue  (1244308, 0, ...
 04495   676   NtContinue  (1244308, 0, ...
 04496   676   NtContinue  (1244308, 0, ...
 04497   676   NtContinue  (1244308, 0, ...
 04498   676   NtContinue  (1244308, 0, ...
 04499   676   NtContinue  (1244308, 0, ...
 04500   676   NtContinue  (1244308, 0, ...
 04501   676   NtContinue  (1244308, 0, ...
 04502   676   NtContinue  (1244308, 0, ...
 04503   676   NtContinue  (1244308, 0, ...
 04504   676   NtContinue  (1244308, 0, ...
 04505   676   NtContinue  (1244308, 0, ...
 04506   676   NtContinue  (1244308, 0, ...
 04507   676   NtContinue  (1244308, 0, ...
 04508   676   NtContinue  (1244308, 0, ...
 04509   676   NtContinue  (1244308, 0, ...
 04510   676   NtContinue  (1244308, 0, ...
 04511   676   NtContinue  (1244308, 0, ...
 04512   676   NtContinue  (1244308, 0, ...
 04513   676   NtContinue  (1244308, 0, ...
 04514   676   NtContinue  (1244308, 0, ...
 04515   676   NtContinue  (1244308, 0, ...
 04516   676   NtContinue  (1244308, 0, ...
 04517   676   NtContinue  (1244308, 0, ...
 04518   676   NtContinue  (1244308, 0, ...
 04519   676   NtContinue  (1244308, 0, ...
 04520   676   NtContinue  (1244308, 0, ...
 04521   676   NtContinue  (1244308, 0, ...
 04522   676   NtContinue  (1244308, 0, ...
 04523   676   NtContinue  (1244308, 0, ...
 04524   676   NtContinue  (1244308, 0, ...
 04525   676   NtContinue  (1244308, 0, ...
 04526   676   NtContinue  (1244308, 0, ...
 04527   676   NtContinue  (1244308, 0, ...
 04528   676   NtContinue  (1244308, 0, ...
 04529   676   NtContinue  (1244308, 0, ...
 04530   676   NtContinue  (1244308, 0, ...
 04531   676   NtContinue  (1244308, 0, ...
 04532   676   NtContinue  (1244308, 0, ...
 04533   676   NtContinue  (1244308, 0, ...
 04534   676   NtContinue  (1244308, 0, ...
 04535   676   NtContinue  (1244308, 0, ...
 04536   676   NtContinue  (1244308, 0, ...
 04537   676   NtContinue  (1244308, 0, ...
 04538   676   NtContinue  (1244308, 0, ...
 04539   676   NtContinue  (1244308, 0, ...
 04540   676   NtContinue  (1244308, 0, ...
 04541   676   NtContinue  (1244308, 0, ...
 04542   676   NtContinue  (1244308, 0, ...
 04543   676   NtContinue  (1244308, 0, ...
 04544   676   NtContinue  (1244308, 0, ...
 04545   676   NtContinue  (1244308, 0, ...
 04546   676   NtContinue  (1244308, 0, ...
 04547   676   NtContinue  (1244308, 0, ...
 04548   676   NtContinue  (1244308, 0, ...
 04549   676   NtContinue  (1244308, 0, ...
 04550   676   NtContinue  (1244308, 0, ...
 04551   676   NtContinue  (1244308, 0, ...
 04552   676   NtContinue  (1244308, 0, ...
 04553   676   NtContinue  (1244308, 0, ...
 04554   676   NtContinue  (1244308, 0, ...
 04555   676   NtContinue  (1244308, 0, ...
 04556   676   NtContinue  (1244308, 0, ...
 04557   676   NtContinue  (1244308, 0, ...
 04558   676   NtContinue  (1244308, 0, ...
 04559   676   NtContinue  (1244308, 0, ...
 04560   676   NtContinue  (1244308, 0, ...
 04561   676   NtContinue  (1244308, 0, ...
 04562   676   NtContinue  (1244308, 0, ...
 04563   676   NtContinue  (1244308, 0, ...
 04564   676   NtContinue  (1244308, 0, ...
 04565   676   NtContinue  (1244308, 0, ...
 04566   676   NtContinue  (1244308, 0, ...
 04567   676   NtContinue  (1244308, 0, ...
 04568   676   NtContinue  (1244308, 0, ...
 04569   676   NtContinue  (1244308, 0, ...
 04570   676   NtContinue  (1244308, 0, ...
 04571   676   NtContinue  (1244308, 0, ...
 04572   676   NtContinue  (1244308, 0, ...
 04573   676   NtContinue  (1244308, 0, ...
 04574   676   NtContinue  (1244308, 0, ...
 04575   676   NtContinue  (1244308, 0, ...
 04576   676   NtContinue  (1244308, 0, ...
 04577   676   NtContinue  (1244308, 0, ...
 04578   676   NtContinue  (1244308, 0, ...
 04579   676   NtContinue  (1244308, 0, ...
 04580   676   NtContinue  (1244308, 0, ...
 04581   676   NtContinue  (1244308, 0, ...
 04582   676   NtContinue  (1244308, 0, ...
 04583   676   NtContinue  (1244308, 0, ...
 04584   676   NtContinue  (1244308, 0, ...
 04585   676   NtContinue  (1244308, 0, ...
 04586   676   NtContinue  (1244308, 0, ...
 04587   676   NtContinue  (1244308, 0, ...
 04588   676   NtContinue  (1244308, 0, ...
 04589   676   NtContinue  (1244308, 0, ...
 04590   676   NtContinue  (1244308, 0, ...
 04591   676   NtContinue  (1244308, 0, ...
 04592   676   NtContinue  (1244308, 0, ...
 04593   676   NtContinue  (1244308, 0, ...
 04594   676   NtContinue  (1244308, 0, ...
 04595   676   NtContinue  (1244308, 0, ...
 04596   676   NtContinue  (1244308, 0, ...
 04597   676   NtContinue  (1244308, 0, ...
 04598   676   NtContinue  (1244308, 0, ...
 04599   676   NtContinue  (1244308, 0, ...
 04600   676   NtContinue  (1244308, 0, ...
 04601   676   NtContinue  (1244308, 0, ...
 04602   676   NtContinue  (1244308, 0, ...
 04603   676   NtContinue  (1244308, 0, ...
 04604   676   NtContinue  (1244308, 0, ...
 04605   676   NtContinue  (1244308, 0, ...
 04606   676   NtContinue  (1244308, 0, ...
 04607   676   NtContinue  (1244308, 0, ...
 04608   676   NtContinue  (1244308, 0, ...
 04609   676   NtContinue  (1244308, 0, ...
 04610   676   NtContinue  (1244308, 0, ...
 04611   676   NtContinue  (1244308, 0, ...
 04612   676   NtContinue  (1244308, 0, ...
 04613   676   NtContinue  (1244308, 0, ...
 04614   676   NtContinue  (1244308, 0, ...
 04615   676   NtContinue  (1244308, 0, ...
 04616   676   NtContinue  (1244308, 0, ...
 04617   676   NtContinue  (1244308, 0, ...
 04618   676   NtContinue  (1244308, 0, ...
 04619   676   NtContinue  (1244308, 0, ...
 04620   676   NtContinue  (1244308, 0, ...
 04621   676   NtContinue  (1244308, 0, ...
 04622   676   NtContinue  (1244308, 0, ...
 04623   676   NtContinue  (1244308, 0, ...
 04624   676   NtContinue  (1244308, 0, ...
 04625   676   NtContinue  (1244308, 0, ...
 04626   676   NtContinue  (1244308, 0, ...
 04627   676   NtContinue  (1244308, 0, ...
 04628   676   NtContinue  (1244308, 0, ...
 04629   676   NtContinue  (1244308, 0, ...
 04630   676   NtContinue  (1244308, 0, ...
 04631   676   NtContinue  (1244308, 0, ...
 04632   676   NtContinue  (1244308, 0, ...
 04633   676   NtContinue  (1244308, 0, ...
 04634   676   NtContinue  (1244308, 0, ...
 04635   676   NtContinue  (1244308, 0, ...
 04636   676   NtContinue  (1244308, 0, ...
 04637   676   NtContinue  (1244308, 0, ...
 04638   676   NtContinue  (1244308, 0, ...
 04639   676   NtContinue  (1244308, 0, ...
 04640   676   NtContinue  (1244308, 0, ...
 04641   676   NtContinue  (1244308, 0, ...
 04642   676   NtContinue  (1244308, 0, ...
 04643   676   NtContinue  (1244308, 0, ...
 04644   676   NtContinue  (1244308, 0, ...
 04645   676   NtContinue  (1244308, 0, ...
 04646   676   NtContinue  (1244308, 0, ...
 04647   676   NtContinue  (1244308, 0, ...
 04648   676   NtContinue  (1244308, 0, ...
 04649   676   NtContinue  (1244308, 0, ...
 04650   676   NtContinue  (1244308, 0, ...
 04651   676   NtContinue  (1244308, 0, ...
 04652   676   NtContinue  (1244308, 0, ...
 04653   676   NtContinue  (1244308, 0, ...
 04654   676   NtContinue  (1244308, 0, ...
 04655   676   NtContinue  (1244308, 0, ...
 04656   676   NtContinue  (1244308, 0, ...
 04657   676   NtContinue  (1244308, 0, ...
 04658   676   NtContinue  (1244308, 0, ...
 04659   676   NtContinue  (1244308, 0, ...
 04660   676   NtContinue  (1244308, 0, ...
 04661   676   NtContinue  (1244308, 0, ...
 04662   676   NtContinue  (1244308, 0, ...
 04663   676   NtContinue  (1244308, 0, ...
 04664   676   NtContinue  (1244308, 0, ...
 04665   676   NtContinue  (1244308, 0, ...
 04666   676   NtContinue  (1244308, 0, ...
 04667   676   NtContinue  (1244308, 0, ...
 04668   676   NtContinue  (1244308, 0, ...
 04669   676   NtContinue  (1244308, 0, ...
 04670   676   NtContinue  (1244308, 0, ...
 04671   676   NtContinue  (1244308, 0, ...
 04672   676   NtContinue  (1244308, 0, ...
 04673   676   NtContinue  (1244308, 0, ...
 04674   676   NtContinue  (1244308, 0, ...
 04675   676   NtContinue  (1244308, 0, ...
 04676   676   NtContinue  (1244308, 0, ...
 04677   676   NtContinue  (1244308, 0, ...
 04678   676   NtContinue  (1244308, 0, ...
 04679   676   NtContinue  (1244308, 0, ...
 04680   676   NtContinue  (1244308, 0, ...
 04681   676   NtContinue  (1244308, 0, ...
 04682   676   NtContinue  (1244308, 0, ...
 04683   676   NtContinue  (1244308, 0, ...
 04684   676   NtContinue  (1244308, 0, ...
 04685   676   NtContinue  (1244308, 0, ...
 04686   676   NtContinue  (1244308, 0, ...
 04687   676   NtContinue  (1244308, 0, ...
 04688   676   NtContinue  (1244308, 0, ...
 04689   676   NtContinue  (1244308, 0, ...
 04690   676   NtContinue  (1244308, 0, ...
 04691   676   NtContinue  (1244308, 0, ...
 04692   676   NtContinue  (1244308, 0, ...
 04693   676   NtContinue  (1244308, 0, ...
 04694   676   NtContinue  (1244308, 0, ...
 04695   676   NtContinue  (1244308, 0, ...
 04696   676   NtContinue  (1244308, 0, ...
 04697   676   NtContinue  (1244308, 0, ...
 04698   676   NtContinue  (1244308, 0, ...
 04699   676   NtContinue  (1244308, 0, ...
 04700   676   NtContinue  (1244308, 0, ...
 04701   676   NtContinue  (1244308, 0, ...
 04702   676   NtContinue  (1244308, 0, ...
 04703   676   NtContinue  (1244308, 0, ...
 04704   676   NtContinue  (1244308, 0, ...
 04705   676   NtContinue  (1244308, 0, ...
 04706   676   NtContinue  (1244308, 0, ...
 04707   676   NtContinue  (1244308, 0, ...
 04708   676   NtContinue  (1244308, 0, ...
 04709   676   NtContinue  (1244308, 0, ...
 04710   676   NtContinue  (1244308, 0, ...
 04711   676   NtContinue  (1244308, 0, ...
 04712   676   NtContinue  (1244308, 0, ...
 04713   676   NtContinue  (1244308, 0, ...
 04714   676   NtContinue  (1244308, 0, ...
 04715   676   NtContinue  (1244308, 0, ...
 04716   676   NtContinue  (1244308, 0, ...
 04717   676   NtContinue  (1244308, 0, ...
 04718   676   NtContinue  (1244308, 0, ...
 04719   676   NtContinue  (1244308, 0, ...
 04720   676   NtContinue  (1244308, 0, ...
 04721   676   NtContinue  (1244308, 0, ...
 04722   676   NtContinue  (1244308, 0, ...
 04723   676   NtContinue  (1244308, 0, ...
 04724   676   NtContinue  (1244308, 0, ...
 04725   676   NtContinue  (1244308, 0, ...
 04726   676   NtContinue  (1244308, 0, ...
 04727   676   NtContinue  (1244308, 0, ...
 04728   676   NtContinue  (1244308, 0, ...
 04729   676   NtContinue  (1244304, 0, ...
 04730   676   NtContinue  (1244304, 0, ...
 04731   676   NtContinue  (1244304, 0, ...
 04732   676   NtContinue  (1244304, 0, ...
 04733   676   NtContinue  (1244304, 0, ...
 04734   676   NtContinue  (1244304, 0, ...
 04735   676   NtContinue  (1244304, 0, ...
 04736   676   NtContinue  (1244304, 0, ...
 04737   676   NtContinue  (1244304, 0, ...
 04738   676   NtContinue  (1244304, 0, ...
 04739   676   NtContinue  (1244304, 0, ...
 04740   676   NtContinue  (1244304, 0, ...
 04741   676   NtContinue  (1244304, 0, ...
 04742   676   NtContinue  (1244304, 0, ...
 04743   676   NtContinue  (1244304, 0, ...
 04744   676   NtContinue  (1244304, 0, ...
 04745   676   NtContinue  (1244304, 0, ...
 04746   676   NtContinue  (1244304, 0, ...
 04747   676   NtContinue  (1244304, 0, ...
 04748   676   NtContinue  (1244304, 0, ...
 04749   676   NtContinue  (1244304, 0, ...
 04750   676   NtContinue  (1244304, 0, ...
 04751   676   NtContinue  (1244304, 0, ...
 04752   676   NtContinue  (1244304, 0, ...
 04753   676   NtContinue  (1244304, 0, ...
 04754   676   NtContinue  (1244304, 0, ...
 04755   676   NtContinue  (1244304, 0, ...
 04756   676   NtContinue  (1244304, 0, ...
 04757   676   NtContinue  (1244304, 0, ...
 04758   676   NtContinue  (1244304, 0, ...
 04759   676   NtContinue  (1244304, 0, ...
 04760   676   NtContinue  (1244304, 0, ...
 04761   676   NtContinue  (1244308, 0, ...
 04762   676   NtContinue  (1244304, 0, ...
 04763   676   NtContinue  (1244304, 0, ...
 04764   676   NtContinue  (1244304, 0, ...
 04765   676   NtContinue  (1244304, 0, ...
 04766   676   NtContinue  (1244308, 0, ...
 04767   676   NtContinue  (1244304, 0, ...
 04768   676   NtContinue  (1244304, 0, ...
 04769   676   NtContinue  (1244304, 0, ...
 04770   676   NtContinue  (1244308, 0, ...
 04771   676   NtContinue  (1244304, 0, ...
 04772   676   NtContinue  (1244304, 0, ...
 04773   676   NtContinue  (1244308, 0, ...
 04774   676   NtContinue  (1244304, 0, ...
 04775   676   NtContinue  (1244304, 0, ...
 04776   676   NtContinue  (1244304, 0, ...
 04777   676   NtContinue  (1244304, 0, ...
 04778   676   NtContinue  (1244304, 0, ...
 04779   676   NtContinue  (1244304, 0, ...
 04780   676   NtContinue  (1244308, 0, ...
 04781   676   NtContinue  (1244304, 0, ...
 04782   676   NtContinue  (1244304, 0, ...
 04783   676   NtContinue  (1244304, 0, ...
 04784   676   NtContinue  (1244304, 0, ...
 04785   676   NtContinue  (1244304, 0, ...
 04786   676   NtContinue  (1244304, 0, ...
 04787   676   NtContinue  (1244308, 0, ...
 04788   676   NtContinue  (1244304, 0, ...
 04789   676   NtContinue  (1244304, 0, ...
 04790   676   NtContinue  (1244304, 0, ...
 04791   676   NtContinue  (1244304, 0, ...
 04792   676   NtContinue  (1244304, 0, ...
 04793   676   NtContinue  (1244304, 0, ...
 04794   676   NtContinue  (1244304, 0, ...
 04795   676   NtContinue  (1244304, 0, ...
 04796   676   NtContinue  (1244304, 0, ...
 04797   676   NtContinue  (1244304, 0, ...
 04798   676   NtContinue  (1244304, 0, ...
 04799   676   NtContinue  (1244304, 0, ...
 04800   676   NtContinue  (1244304, 0, ...
 04801   676   NtContinue  (1244304, 0, ...
 04802   676   NtContinue  (1244304, 0, ...
 04803   676   NtContinue  (1244304, 0, ...
 04804   676   NtContinue  (1244304, 0, ...
 04805   676   NtContinue  (1244304, 0, ...
 04806   676   NtContinue  (1244304, 0, ...
 04807   676   NtContinue  (1244304, 0, ...
 04808   676   NtContinue  (1244304, 0, ...
 04809   676   NtContinue  (1244304, 0, ...
 04810   676   NtContinue  (1244304, 0, ...
 04811   676   NtContinue  (1244304, 0, ...
 04812   676   NtContinue  (1244304, 0, ...
 04813   676   NtContinue  (1244304, 0, ...
 04814   676   NtContinue  (1244304, 0, ...
 04815   676   NtContinue  (1244304, 0, ...
 04816   676   NtContinue  (1244304, 0, ...
 04817   676   NtContinue  (1244304, 0, ...
 04818   676   NtContinue  (1244304, 0, ...
 04819   676   NtContinue  (1244304, 0, ...
 04820   676   NtContinue  (1244304, 0, ...
 04821   676   NtContinue  (1244304, 0, ...
 04822   676   NtContinue  (1244304, 0, ...
 04823   676   NtContinue  (1244304, 0, ...
 04824   676   NtContinue  (1244304, 0, ...
 04825   676   NtContinue  (1244304, 0, ...
 04826   676   NtContinue  (1244304, 0, ...
 04827   676   NtContinue  (1244304, 0, ...
 04828   676   NtContinue  (1244304, 0, ...
 04829   676   NtContinue  (1244304, 0, ...
 04830   676   NtContinue  (1244304, 0, ...
 04831   676   NtContinue  (1244304, 0, ...
 04832   676   NtContinue  (1244304, 0, ...
 04833   676   NtContinue  (1244304, 0, ...
 04834   676   NtContinue  (1244304, 0, ...
 04835   676   NtContinue  (1244308, 0, ...
 04836   676   NtContinue  (1244304, 0, ...
 04837   676   NtContinue  (1244308, 0, ...
 04838   676   NtContinue  (1244304, 0, ...
 04839   676   NtContinue  (1244304, 0, ...
 04840   676   NtContinue  (1244304, 0, ...
 04841   676   NtContinue  (1244304, 0, ...
 04842   676   NtContinue  (1244304, 0, ...
 04843   676   NtContinue  (1244304, 0, ...
 04844   676   NtContinue  (1244304, 0, ...
 04845   676   NtContinue  (1244304, 0, ...
 04846   676   NtContinue  (1244304, 0, ...
 04847   676   NtContinue  (1244304, 0, ...
 04848   676   NtContinue  (1244304, 0, ...
 04849   676   NtContinue  (1244304, 0, ...
 04850   676   NtContinue  (1244304, 0, ...
 04851   676   NtContinue  (1244304, 0, ...
 04852   676   NtContinue  (1244304, 0, ...
 04853   676   NtContinue  (1244304, 0, ...
 04854   676   NtContinue  (1244304, 0, ...
 04855   676   NtContinue  (1244304, 0, ...
 04856   676   NtContinue  (1244304, 0, ...
 04857   676   NtContinue  (1244304, 0, ...
 04858   676   NtContinue  (1244304, 0, ...
 04859   676   NtContinue  (1244304, 0, ...
 04860   676   NtContinue  (1244304, 0, ...
 04861   676   NtContinue  (1244308, 0, ...
 04862   676   NtContinue  (1244304, 0, ...
 04863   676   NtContinue  (1244304, 0, ...
 04864   676   NtContinue  (1244304, 0, ...
 04865   676   NtContinue  (1244304, 0, ...
 04866   676   NtContinue  (1244304, 0, ...
 04867   676   NtContinue  (1244304, 0, ...
 04868   676   NtContinue  (1244304, 0, ...
 04869   676   NtContinue  (1244304, 0, ...
 04870   676   NtContinue  (1244304, 0, ...
 04871   676   NtContinue  (1244304, 0, ...
 04872   676   NtContinue  (1244308, 0, ...
 04873   676   NtContinue  (1244304, 0, ...
 04874   676   NtContinue  (1244304, 0, ...
 04875   676   NtContinue  (1244308, 0, ...
 04876   676   NtContinue  (1244304, 0, ...
 04877   676   NtContinue  (1244304, 0, ...
 04878   676   NtContinue  (1244304, 0, ...
 04879   676   NtContinue  (1244304, 0, ...
 04880   676   NtContinue  (1244304, 0, ...
 04881   676   NtContinue  (1244304, 0, ...
 04882   676   NtContinue  (1244304, 0, ...
 04883   676   NtContinue  (1244304, 0, ...
 04884   676   NtContinue  (1244304, 0, ...
 04885   676   NtContinue  (1244304, 0, ...
 04886   676   NtContinue  (1244304, 0, ...
 04887   676   NtContinue  (1244304, 0, ...
 04888   676   NtContinue  (1244304, 0, ...
 04889   676   NtContinue  (1244304, 0, ...
 04890   676   NtContinue  (1244304, 0, ...
 04891   676   NtContinue  (1244304, 0, ...
 04892   676   NtContinue  (1244304, 0, ...
 04893   676   NtContinue  (1244304, 0, ...
 04894   676   NtContinue  (1244304, 0, ...
 04895   676   NtContinue  (1244304, 0, ...
 04896   676   NtContinue  (1244304, 0, ...
 04897   676   NtContinue  (1244304, 0, ...
 04898   676   NtContinue  (1244304, 0, ...
 04899   676   NtContinue  (1244304, 0, ...
 04900   676   NtContinue  (1244304, 0, ...
 04901   676   NtContinue  (1244304, 0, ...
 04902   676   NtContinue  (1244304, 0, ...
 04903   676   NtContinue  (1244308, 0, ...
 04904   676   NtContinue  (1244304, 0, ...
 04905   676   NtContinue  (1244304, 0, ...
 04906   676   NtContinue  (1244308, 0, ...
 04907   676   NtContinue  (1244304, 0, ...
 04908   676   NtContinue  (1244304, 0, ...
 04909   676   NtContinue  (1244304, 0, ...
 04910   676   NtContinue  (1244304, 0, ...
 04911   676   NtContinue  (1244304, 0, ...
 04912   676   NtContinue  (1244304, 0, ...
 04913   676   NtContinue  (1244304, 0, ...
 04914   676   NtContinue  (1244304, 0, ...
 04915   676   NtContinue  (1244304, 0, ...
 04916   676   NtContinue  (1244304, 0, ...
 04917   676   NtContinue  (1244304, 0, ...
 04918   676   NtContinue  (1244304, 0, ...
 04919   676   NtContinue  (1244304, 0, ...
 04920   676   NtContinue  (1244304, 0, ...
 04921   676   NtContinue  (1244304, 0, ...
 04922   676   NtContinue  (1244304, 0, ...
 04923   676   NtContinue  (1244304, 0, ...
 04924   676   NtContinue  (1244304, 0, ...
 04925   676   NtContinue  (1244304, 0, ...
 04926   676   NtContinue  (1244304, 0, ...
 04927   676   NtContinue  (1244304, 0, ...
 04928   676   NtContinue  (1244304, 0, ...
 04929   676   NtContinue  (1244304, 0, ...
 04930   676   NtContinue  (1244304, 0, ...
 04931   676   NtContinue  (1244304, 0, ...
 04932   676   NtContinue  (1244304, 0, ...
 04933   676   NtContinue  (1244304, 0, ...
 04934   676   NtContinue  (1244304, 0, ...
 04935   676   NtContinue  (1244304, 0, ...
 04936   676   NtContinue  (1244304, 0, ...
 04937   676   NtContinue  (1244304, 0, ...
 04938   676   NtContinue  (1244304, 0, ...
 04939   676   NtContinue  (1244304, 0, ...
 04940   676   NtContinue  (1244304, 0, ...
 04941   676   NtContinue  (1244304, 0, ...
 04942   676   NtContinue  (1244308, 0, ...
 04943   676   NtContinue  (1244304, 0, ...
 04944   676   NtContinue  (1244304, 0, ...
 04945   676   NtContinue  (1244292, 0, ...
 04946   676   NtContinue  (1244272, 0, ...
 04947   676   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04948   676   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   676   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04950   676   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04951   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04952   676   NtReleaseMutant  (16, ...
 04953   676   NtContinue  (-132120440, 0, ...
 04952   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04954   676   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04955   676   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04956   676   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04957   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04958   676   NtReleaseMutant  (16, ...
 04959   676   NtContinue  (-132120440, 0, ...
 04958   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04960   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04961   676   NtReleaseMutant  (16, ...
 04962   676   NtContinue  (-132120440, 0, ...
 04961   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04963   676   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04964   676   NtReleaseMutant  (16, ...
 04965   676   NtContinue  (-132120440, 0, ...
 04964   676   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED