Summary:


NtAccessCheck(>) 
 1 
NtSetInformationThread(>) 
 1 
NtQueryInformationProcess(>) 
 3 
NtQueryInformationToken(>) 
 15 

NtAddAtom(>) 
 1 
NtTestAlert(>) 
 1 
NtSetInformationFile(>) 
 3 
NtFlushInstructionCache(>) 
 16 

NtCallbackReturn(>) 
 1 
NtUserGetDC(>) 
 1 
NtUserRegisterWindowMessage(>) 
 3 
NtQuerySystemInformation(>) 
 17 

NtConnectPort(>) 
 1 
NtUserGetGUIThreadInfo(>) 
 1 
NtOpenProcessToken(>) 
 4 
NtOpenFile(>) 
 19 

NtDeviceIoControlFile(>) 
 1 
NtUserGetProcessWindowStation(>) 
 1 
NtQueryKey(>) 
 4 
NtOpenSection(>) 
 22 

NtEnumerateValueKey(>) 
 1 
NtUserGetThreadDesktop(>) 
 1 
NtSetInformationObject(>) 
 4 
NtQueryAttributesFile(>) 
 22 

NtFsControlFile(>) 
 1 
NtCreateFile(>) 
 2 
NtGdiGetStockObject(>) 
 5 
NtWaitForSingleObject(>) 
 26 

NtGdiCreateBitmap(>) 
 1 
NtCreateKey(>) 
 2 
NtQueryDefaultUILanguage(>) 
 6 
NtMapViewOfSection(>) 
 30 

NtGdiCreatePatternBrushInternal(>) 
 1 
NtDuplicateObject(>) 
 2 
NtQuerySection(>) 
 6 
NtProtectVirtualMemory(>) 
 32 

NtGdiInit(>) 
 1 
NtGdiCreateSolidBrush(>) 
 2 
NtQueryVolumeInformationFile(>) 
 7 
NtUserGetClassInfo(>) 
 37 

NtGdiQueryFontAssocInfo(>) 
 1 
NtGdiHfontCreate(>) 
 2 
NtQueryDebugFilterState(>) 
 8 
NtAllocateVirtualMemory(>) 
 45 

NtGdiSelectBitmap(>) 
 1 
NtNotifyChangeKey(>) 
 2 
NtRequestWaitReplyPort(>) 
 8 
NtReleaseMutant(>) 
 47 

NtOpenEvent(>) 
 1 
NtOpenDirectoryObject(>) 
 2 
NtUnmapViewOfSection(>) 
 8 
NtUserFindExistingCursorIcon(>) 
 48 

NtOpenKeyedEvent(>) 
 1 
NtQueryInstallUILanguage(>) 
 2 
NtUserCallNoParam(>) 
 9 
NtUserRegisterClassExWOW(>) 
 63 

NtOpenMutant(>) 
 1 
NtQueryVirtualMemory(>) 
 2 
NtUserGetWindowDC(>) 
 10 
NtOpenKey(>) 
 79 

NtOpenProcess(>) 
 1 
NtSetValueKey(>) 
 2 
NtOpenProcessTokenEx(>) 
 11 
NtQueryValueKey(>) 
 105 

NtOpenSymbolicLinkObject(>) 
 1 
NtUserGetObjectInformation(>) 
 2 
NtOpenThreadTokenEx(>) 
 11 
NtClose(>) 
 111 

NtQueryObject(>) 
 1 
NtCreateEvent(>) 
 3 
NtUserSystemParametersInfo(>) 
 11 
NtContinue(>) 
 4047 

NtQuerySymbolicLinkObject(>) 
 1 
NtGdiCreateCompatibleDC(>) 
 3 
NtCreateSection(>) 
 12 

NtRegisterThreadTerminatePort(>) 
 1 
NtQueryDefaultLocale(>) 
 3 
NtFreeVirtualMemory(>) 
 12 

NtSecureConnectPort(>) 
 1 

Trace:
 00001   404   NtOpenKey  (0x80000000, {24, 0, 0x40, 0, 0,  (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00002   404   NtOpenKeyedEvent  (0x2000000, {24, 0, 0x0, 0, 0,  (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0
 00003   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00004   404   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0
 00005   404   NtAllocateVirtualMemory  (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0
 00006   404   NtAllocateVirtualMemory  (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0
 00007   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00008   404   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0
 00009   404   NtAllocateVirtualMemory  (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0
 00010   404   NtOpenDirectoryObject  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0
 00011   404   NtOpenSymbolicLinkObject  (0x1, {24, 8, 0x40, 0, 0,  (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0
 00012   404   NtQuerySymbolicLinkObject  (12, ...  (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0
 00013   404   NtClose  (12, ... ) == 0x0
 00014   404   NtOpenFile  (0x100020, {24, 0, 0x42, 0, 0,  (0x100020, {24, 0, 0x42, 0, 0, "\??\U:\startupscripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0
 00015   404   NtQueryVolumeInformationFile  (12, 1243848, 8, Device, ... {status=0x0, info=8}, ) == 0x0
 00016   404   NtFsControlFile  (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... ) == STATUS_INVALID_PARAMETER
 00017   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243832, ... ) }, 1243832, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00018   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0
 00019   404   NtMapViewOfSection  (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e60000), 0x0, 937984, ) == 0x0
 00020   404   NtClose  (16, ... ) == 0x0
 00021   404   NtQuerySystemInformation  (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0
 00022   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00023   404   NtCreateSection  (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0
 00024   404   NtSecureConnectPort  ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1242016, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0
 00025   404   NtClose  (16, ... ) == 0x0
 00026   404   NtQueryObject  (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0
 00027   404   NtSetInformationObject  (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0
 00028   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00029   404   NtQueryVirtualMemory  (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0
 00030   404   NtAllocateVirtualMemory  (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0
 00031   404   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 0, 0, 0, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 396, 404, 1479, 0} "\320\3\30\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" )  ... {28, 56, reply, 0, 396, 404, 1479, 0}  (24, {28, 56, new_msg, 0, 0, 0, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 396, 404, 1479, 0} "\320\3\30\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" )  ) == 0x0
 00032   404   NtRegisterThreadTerminatePort  (24, ... ) == 0x0
 00033   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0
 00034   404   NtQueryValueKey  (16,  (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00035   404   NtClose  (16, ... ) == 0x0
 00036   404   NtAllocateVirtualMemory  (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0
 00037   404   NtOpenMutant  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\NlsCacheMutant"}, ... 16, ) }, ... 16, ) == 0x0
 00038   404   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 28, ) }, ... 28, ) == 0x0
 00039   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0
 00040   404   NtClose  (28, ... ) == 0x0
 00041   404   NtQueryDefaultLocale  (0, 2012046252, ... ) == 0x0
 00042   404   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 28, ) }, ... 28, ) == 0x0
 00043   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 212992, ) == 0x0
 00044   404   NtClose  (28, ... ) == 0x0
 00045   404   NtOpenSection  (0x5, {24, 0, 0x40, 0, 0,  (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 28, ) }, ... 28, ) == 0x0
 00046   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0
 00047   404   NtQuerySection  (28, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0
 00048   404   NtClose  (28, ... ) == 0x0
 00049   404   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 28, ) }, ... 28, ) == 0x0
 00050   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0
 00051   404   NtClose  (28, ... ) == 0x0
 00052   404   NtQueryVirtualMemory  (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0
 00053   404   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00054   404   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00055   404   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 396, 404, 1484, 0} "\370\323\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" )  ... {28, 56, reply, 0, 396, 404, 1484, 0}  (24, {28, 56, new_msg, 0, 2012558373, 2012047104, 2013025280, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 396, 404, 1484, 0} "\370\323\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" )  ) == 0x0
 00056   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 128, ) == 0x0
 00057   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 128, ... (0x480000), 94208, 4, ) == 0x0
 00058   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00059   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00060   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77d40000), 0x0, 577536, ) == 0x0
 00061   404   NtClose  (28, ... ) == 0x0
 00062   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00063   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c70000), 0x0, 262144, ) == 0x0
 00064   404   NtClose  (28, ... ) == 0x0
 00065   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ADVAPI32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00066   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 569344, ) == 0x0
 00067   404   NtClose  (28, ... ) == 0x0
 00068   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00069   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77cc0000), 0x0, 479232, ) == 0x0
 00070   404   NtClose  (28, ... ) == 0x0
 00071   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00072   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00073   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00074   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00075   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00076   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00077   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00078   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0
 00079   404   NtClose  (28, ... ) == 0x0
 00080   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "MSVCRT.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00081   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 339968, ) == 0x0
 00082   404   NtClose  (28, ... ) == 0x0
 00083   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "OLE32.DLL"}, ... 28, ) }, ... 28, ) == 0x0
 00084   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x771b0000), 0x0, 1155072, ) == 0x0
 00085   404   NtClose  (28, ... ) == 0x0
 00086   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00087   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00088   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00089   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00090   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00091   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00092   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00093   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 8339456, ) == 0x0
 00094   404   NtClose  (28, ... ) == 0x0
 00095   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 28, ) }, ... 28, ) == 0x0
 00096   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x772d0000), 0x0, 405504, ) == 0x0
 00097   404   NtClose  (28, ... ) == 0x0
 00098   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00099   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00100   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00101   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00102   404   NtAllocateVirtualMemory  (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0
 00103   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00104   404   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00105   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 1242624, ... ) }, 1242624, ... ) == 0x0
 00106   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\ws2_32.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0
 00107   404   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 28, ... 32, ) == 0x0
 00108   404   NtQuerySection  (32, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00109   404   NtOpenProcessToken  (-1, 0x8, ... 36, ) == 0x0
 00110   404   NtQueryInformationToken  (36, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0
 00111   404   NtOpenKey  (0x3, {24, 0, 0x40, 0, 0,  (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00112   404   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 40, ) }, ... 40, ) == 0x0
 00113   404   NtQueryValueKey  (40,  (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (40, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00114   404   NtClose  (40, ... ) == 0x0
 00115   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00116   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 40, ) == 0x0
 00117   404   NtQueryInformationToken  (40, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00118   404   NtClose  (40, ... ) == 0x0
 00119   404   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00120   404   NtClose  (36, ... ) == 0x0
 00121   404   NtClose  (28, ... ) == 0x0
 00122   404   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 86016, ) == 0x0
 00123   404   NtClose  (32, ... ) == 0x0
 00124   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00125   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00126   404   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00127   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 1241820, ... ) }, 1241820, ... ) == 0x0
 00128   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\WS2HELP.dll"}, 5, 96, ... 32, {status=0x0, info=1}, ) }, 5, 96, ... 32, {status=0x0, info=1}, ) == 0x0
 00129   404   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 32, ... 28, ) == 0x0
 00130   404   NtQuerySection  (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00131   404   NtClose  (32, ... ) == 0x0
 00132   404   NtMapViewOfSection  (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0
 00133   404   NtClose  (28, ... ) == 0x0
 00134   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00135   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00136   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00137   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00138   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00139   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00140   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 4, ... (0x480000), 94208, 64, ) == 0x0
 00141   404   NtProtectVirtualMemory  (-1, (0x480000), 94208, 64, ... (0x480000), 94208, 4, ) == 0x0
 00142   404   NtFlushInstructionCache  (-1, 4718592, 94208, ... ) == 0x0
 00143   404   NtOpenProcessToken  (-1, 0x8, ... 28, ) == 0x0
 00144   404   NtQueryInformationToken  (28, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00145   404   NtClose  (28, ... ) == 0x0
 00146   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00147   404   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00148   404   NtClose  (28, ... ) == 0x0
 00149   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 28, ) }, ... 28, ) == 0x0
 00150   404   NtQueryValueKey  (28,  (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00151   404   NtQueryValueKey  (28,  (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (28, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00152   404   NtClose  (28, ... ) == 0x0
 00153   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 28, ) }, ... 28, ) == 0x0
 00154   404   NtQueryValueKey  (28,  (28, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00155   404   NtClose  (28, ... ) == 0x0
 00156   404   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 28, ) }, ... 28, ) == 0x0
 00157   404   NtSetInformationObject  (28, Handle, {Inherit=0,ProtectFromClose=1,}, 2011365632, ... ) == 0x0
 00158   404   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00159   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00160   404   NtRequestWaitReplyPort  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\31\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 396, 404, 1488, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" )  ... {28, 56, reply, 0, 396, 404, 1488, 0}  (24, {28, 56, new_msg, 0, 1246456, 1, 24, 2012568566} "\210\6\31\1\0\0\0\0\314\4\23\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 396, 404, 1488, 0} "XQ\26\0\0\0\0\0\0\0\0\0\324Wh\364\3\0\0\0\234\6\31\1$\1\0\0" )  ) == 0x0
 00161   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00162   404   NtMapViewOfSection  (32, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x4a0000), 0x0, 1060864, ) == 0x0
 00163   404   NtCreateEvent  (0x1f0003, 0x0, 1, 0, ... 36, ) == 0x0
 00164   404   NtOpenThreadTokenEx  (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN
 00165   404   NtOpenProcessTokenEx  (-1, 0x8, 512, ... -2147482020, ) == 0x0
 00166   404   NtQueryInformationToken  (-2147482020, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL
 00167   404   NtQueryInformationToken  (-2147482020, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00168   404   NtClose  (-2147482020, ... ) == 0x0
 00169   404   NtAllocateVirtualMemory  (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0
 00170   404   NtFreeVirtualMemory  (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0
 00171   404   NtDuplicateObject  (-1, 40, -1, 0x0, 0, 2, ... 48, ) == 0x0
 00172   404   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00173   404   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00174   404   NtClose  (-2147482020, ... ) == 0x0
 00175   404   NtOpenKey  (0x20019, {24, 0, 0x240, 0, 0,  (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00176   404   NtQueryValueKey  (-2147482020,  (-2147482020, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00177   404   NtClose  (-2147482020, ... ) == 0x0
 00178   404   NtQueryDefaultLocale  (0, -130905588, ... ) == 0x0
 00179   404   NtGdiQueryFontAssocInfo  (0, ... ) == 0x0
 00180   404   NtUserCallNoParam  (24, ... ) == 0x0
 00181   404   NtGdiCreateCompatibleDC  (0, ...
 00182   404   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0
 00181   404   NtGdiCreateCompatibleDC  ... ) == 0x1301031c
 00183   404   NtGdiGetStockObject  (0, ... ) == 0x1900010
 00184   404   NtGdiGetStockObject  (4, ... ) == 0x1900011
 00185   404   NtGdiCreateBitmap  (8, 8, 1, 1, 2010393708, ... ) == 0x13050402
 00186   404   NtGdiCreateSolidBrush  (0, 0, ...
 00187   404   NtAllocateVirtualMemory  (-1, 0, 0, 4096, 12288, 4, ... 9109504, 4096, ) == 0x0
 00186   404   NtGdiCreateSolidBrush  ... ) == 0xe100408
 00188   404   NtGdiGetStockObject  (13, ... ) == 0x18a0021
 00189   404   NtGdiCreateCompatibleDC  (0, ... ) == 0x39010416
 00190   404   NtGdiSelectBitmap  (956367894, 319095810, ... ) == 0x185000f
 00191   404   NtUserGetThreadDesktop  (404, 0, ... ) == 0x2c
 00192   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 52, ) }, ... 52, ) == 0x0
 00193   404   NtQueryValueKey  (52,  (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (52, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0
 00194   404   NtClose  (52, ... ) == 0x0
 00195   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00196   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 673, 128, 0, ... ) == 0x810dc017
 00197   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00198   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 674, 128, 0, ... ) == 0x810dc01c
 00199   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00200   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 675, 128, 0, ... ) == 0x810dc01e
 00201   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00202   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 676, 128, 0, ... ) == 0x810d8002
 00203   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10013
 00204   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 677, 128, 0, ... ) == 0x810dc018
 00205   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00206   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 678, 128, 0, ... ) == 0x810dc01a
 00207   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00208   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 679, 128, 0, ... ) == 0x810dc01d
 00209   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00210   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 681, 128, 0, ... ) == 0x810dc026
 00211   404   NtUserFindExistingCursorIcon  (1241204, 1241220, 1241788, ... ) == 0x10011
 00212   404   NtUserRegisterClassExWOW  (1241724, 1241804, 1241788, 1241820, 680, 128, 0, ... ) == 0x810dc019
 00213   404   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ...
 00214   404   NtAllocateVirtualMemory  (-1, 6057984, 0, 4096, 4096, 32, ... 6057984, 4096, ) == 0x0
 00213   404   NtUserRegisterClassExWOW  ... ) == 0x810dc020
 00215   404   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810dc022
 00216   404   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810dc023
 00217   404   NtUserRegisterClassExWOW  (1241676, 1241752, 1241768, 1241740, 0, 130, 0, ... ) == 0x810dc024
 00218   404   NtUserRegisterClassExWOW  (1241676, 1241756, 1241740, 1241772, 0, 128, 0, ... ) == 0x810dc025
 00219   404   NtCallbackReturn  (0, 0, 0, ...
 00220   404   NtGdiInit  (... ) == 0x1
 00221   404   NtGdiGetStockObject  (18, ... ) == 0x290001c
 00222   404   NtGdiGetStockObject  (19, ... ) == 0x1b00019
 00223   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00224   404   NtAllocateVirtualMemory  (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0
 00225   404   NtAllocateVirtualMemory  (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0
 00226   404   NtAllocateVirtualMemory  (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0
 00227   404   NtOpenSection  (0x4, {24, 0, 0x40, 0, 0,  (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 52, ) }, ... 52, ) == 0x0
 00228   404   NtMapViewOfSection  (52, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8d0000), 0x0, 12288, ) == 0x0
 00229   404   NtClose  (52, ... ) == 0x0
 00230   404   NtAllocateVirtualMemory  (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0
 00231   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00232   404   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00233   404   NtOpenKey  (0x20019, {24, 28, 0x40, 0, 0,  (0x20019, {24, 28, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 52, ) }, ... 52, ) == 0x0
 00234   404   NtQueryValueKey  (52,  (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (52, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0
 00235   404   NtClose  (52, ... ) == 0x0
 00236   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00237   404   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00238   404   NtAllocateVirtualMemory  (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0
 00239   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00240   404   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00241   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 52, ) }, ... 52, ) == 0x0
 00242   404   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00243   404   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00244   404   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00245   404   NtClose  (52, ... ) == 0x0
 00246   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 52, ) }, ... 52, ) == 0x0
 00247   404   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00248   404   NtQueryValueKey  (52,  (52, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00249   404   NtClose  (52, ... ) == 0x0
 00250   404   NtOpenDirectoryObject  (0x2000f, {24, 0, 0x40, 0, 0,  (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 52, ) }, ... 52, ) == 0x0
 00251   404   NtOpenEvent  (0x1f0003, {24, 52, 0x0, 0, 0,  (0x1f0003, {24, 52, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00252   404   NtUserRegisterWindowMessage  ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc07b
 00253   404   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00254   404   NtOpenKey  (0x9, {24, 28, 0x40, 0, 0,  (0x9, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00255   404   NtOpenKey  (0x1, {24, 0, 0x40, 0, 0,  (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 56, ) }, ... 56, ) == 0x0
 00256   404   NtQueryValueKey  (56,  (56, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00257   404   NtClose  (56, ... ) == 0x0
 00258   404   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00259   404   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00260   404   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0
 00261   404   NtQueryValueKey  (56,  (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00262   404   NtClose  (56, ... ) == 0x0
 00263   404   NtQueryDefaultUILanguage  (1241756, ...
 00264   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00265   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00266   404   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00267   404   NtClose  (-2147482020, ... ) == 0x0
 00268   404   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00269   404   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00270   404   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00271   404   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00272   404   NtClose  (-2147482032, ... ) == 0x0
 00273   404   NtClose  (-2147482020, ... ) == 0x0
 00263   404   NtQueryDefaultUILanguage  ... ) == 0x0
 00274   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00275   404   NtQueryInstallUILanguage  (2012047340, ... ) == 0x0
 00276   404   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00277   404   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0
 00278   404   NtMapViewOfSection  (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 8323072, ) == 0x0
 00279   404   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00280   404   NtQueryDefaultUILanguage  (2013024600, ...
 00281   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00282   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00283   404   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00284   404   NtClose  (-2147482020, ... ) == 0x0
 00285   404   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00286   404   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00287   404   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00288   404   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00289   404   NtClose  (-2147482032, ... ) == 0x0
 00290   404   NtClose  (-2147482020, ... ) == 0x0
 00280   404   NtQueryDefaultUILanguage  ... ) == 0x0
 00291   404   NtAllocateVirtualMemory  (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0
 00292   404   NtQueryInstallUILanguage  (2013024602, ... ) == 0x0
 00293   404   NtQueryDefaultLocale  (1, 1239792, ... ) == 0x0
 00294   404   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00295   404   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\31\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 396, 404, 1495, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 396, 404, 1495, 0}  (24, {128, 156, new_msg, 0, 1240648, 1, 96, 0} "\210\6\31\1\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" ... {128, 156, reply, 0, 396, 404, 1495, 0} "\210\347\26\0\33\0\1\0\0\0\0\0\1\361\22\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0\20\311\305\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0H\365\22\0\0\0\0\0" )  ) == 0x0
 00296   404   NtClose  (56, ... ) == 0x0
 00297   404   NtClose  (60, ... ) == 0x0
 00298   404   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00299   404   NtUnmapViewOfSection  (-1, 0x12f548, ... ) == STATUS_NOT_MAPPED_VIEW
 00300   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00301   404   NtOpenKey  (0x8, {24, 0, 0x40, 0, 0,  (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00302   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00303   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00304   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238876, ... ) }, 1238876, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00305   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00306   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00307   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00308   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 1239468, ... ) }, 1239468, ... ) == 0x0
 00309   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0
 00310   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00311   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00312   404   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00313   404   NtClose  (56, ... ) == 0x0
 00314   404   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 921600, ) == 0x0
 00315   404   NtClose  (64, ... ) == 0x0
 00316   404   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00317   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0
 00318   404   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0
 00319   404   NtQuerySection  (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00320   404   NtClose  (64, ... ) == 0x0
 00321   404   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71950000), 0x0, 933888, ) == 0x0
 00322   404   NtClose  (56, ... ) == 0x0
 00323   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00324   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00325   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00326   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00327   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00328   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00329   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00330   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00331   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00332   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00333   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00334   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00335   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00336   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00337   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00338   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00339   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00340   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00341   404   NtProtectVirtualMemory  (-1, (0x71951000), 1952, 4, ... (0x71951000), 4096, 32, ) == 0x0
 00342   404   NtProtectVirtualMemory  (-1, (0x71951000), 4096, 32, ... (0x71951000), 4096, 4, ) == 0x0
 00343   404   NtFlushInstructionCache  (-1, 1905594368, 1952, ... ) == 0x0
 00344   404   NtAddAtom  ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240652, ... ) , 42, 1240652, ... ) == 0x0
 00345   404   NtQueryDefaultUILanguage  (1239368, ...
 00346   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00347   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... -2147482020, ) == 0x0
 00348   404   NtQueryInformationToken  (-2147482020, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00349   404   NtClose  (-2147482020, ... ) == 0x0
 00350   404   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... -2147482020, ) }, ... -2147482020, ) == 0x0
 00351   404   NtOpenKey  (0x80000000, {24, 0, 0x240, 0, 0,  (0x80000000, {24, 0, 0x240, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00352   404   NtOpenKey  (0x80000000, {24, -2147482020, 0x640, 0, 0,  (0x80000000, {24, -2147482020, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482032, ) }, ... -2147482032, ) == 0x0
 00353   404   NtQueryValueKey  (-2147482032,  (-2147482032, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00354   404   NtClose  (-2147482032, ... ) == 0x0
 00355   404   NtClose  (-2147482020, ... ) == 0x0
 00345   404   NtQueryDefaultUILanguage  ... ) == 0x0
 00356   404   NtOpenKey  (0x20019, {24, 0, 0x40, 0, 0,  (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Nls\MUILanguages"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00357   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238220, ... ) }, 1238220, ... ) == 0x0
 00358   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00359   404   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0
 00360   404   NtClose  (56, ... ) == 0x0
 00361   404   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00362   404   NtClose  (64, ... ) == 0x0
 00363   404   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00364   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237860, ... ) }, 1237860, ... ) == 0x0
 00365   404   NtCreateFile  (0x80100080, {24, 0, 0x40, 0, 1238560,  (0x80100080, {24, 0, 0x40, 0, 1238560, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0
 00366   404   NtCreateSection  (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0
 00367   404   NtClose  (64, ... ) == 0x0
 00368   404   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8e0000), {0, 0}, 4096, ) == 0x0
 00369   404   NtClose  (56, ... ) == 0x0
 00370   404   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00371   404   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00372   404   NtCreateSection  (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0
 00373   404   NtMapViewOfSection  (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 4096, ) == 0x0
 00374   404   NtQueryInformationFile  (56, 1238180, 56, NetworkOpen, ... {status=0x0, info=56}, ) == 0x0
 00375   404   NtOpenFile  (0x1200a9, {24, 0, 0x40, 0, 0,  (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00376   404   NtRequestWaitReplyPort  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\31\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 396, 404, 1496, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ... {128, 156, reply, 0, 396, 404, 1496, 0}  (24, {128, 156, new_msg, 0, 1238260, 1, 96, 0} "\210\6\31\1\33\0\1\0\240\315Z\371\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 396, 404, 1496, 0} "h\334\26\0\33\0\1\0\0\0\0\0\2209\307\1\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\0\364\353\22\0\0\0\0\0" )  ) == 0x0
 00377   404   NtClose  (56, ... ) == 0x0
 00378   404   NtClose  (64, ... ) == 0x0
 00379   404   NtUnmapViewOfSection  (-1, 0x8e0000, ... ) == 0x0
 00380   404   NtUnmapViewOfSection  (-1, 0x12ebf4, ... ) == STATUS_NOT_MAPPED_VIEW
 00381   404   NtQueryDebugFilterState  (53, 2, ... ) == 0x0
 00382   404   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00383   404   NtUserSystemParametersInfo  (104, 0, 1906151468, 0, ... ) == 0x1
 00384   404   NtUserGetDC  (0, ... ) == 0x1010050
 00385   404   NtUserCallOneParam  (16842832, 56, ... ) == 0x1
 00386   404   NtUserSystemParametersInfo  (38, 4, 1906153440, 0, ... ) == 0x1
 00387   404   NtUserSystemParametersInfo  (66, 12, 1240672, 0, ... ) == 0x1
 00388   404   NtOpenProcessToken  (-1, 0x8, ... 64, ) == 0x0
 00389   404   NtAccessCheck  (1327448, 64, 0x1, 1240076, 1240020, 56, 1240104, ... ) == STATUS_NO_IMPERSONATION_TOKEN
 00390   404   NtClose  (64, ... ) == 0x0
 00391   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00392   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 64, ) == 0x0
 00393   404   NtQueryInformationToken  (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00394   404   NtClose  (64, ... ) == 0x0
 00395   404   NtOpenKey  (0x2000000, {24, 0, 0x640, 0, 0,  (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 64, ) }, ... 64, ) == 0x0
 00396   404   NtSetInformationObject  (64, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00397   404   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00398   404   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00399   404   NtClose  (56, ... ) == 0x0
 00400   404   NtUserSystemParametersInfo  (41, 500, 1240172, 0, ... ) == 0x1
 00401   404   NtAllocateVirtualMemory  (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0
 00402   404   NtOpenKey  (0x1, {24, 64, 0x40, 0, 0,  (0x1, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0
 00403   404   NtQueryValueKey  (56,  (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00404   404   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 68, ) }, ... 68, ) == 0x0
 00405   404   NtQueryValueKey  (68,  (68, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00406   404   NtClose  (68, ... ) == 0x0
 00407   404   NtClose  (56, ... ) == 0x0
 00408   404   NtUserSystemParametersInfo  (102, 0, 1906153328, 0, ... ) == 0x1
 00409   404   NtUserSystemParametersInfo  (4130, 0, 1240696, 0, ... ) == 0x1
 00410   404   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 56, ) }, ... 56, ) == 0x0
 00411   404   NtEnumerateValueKey  (56, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES
 00412   404   NtClose  (56, ... ) == 0x0
 00413   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00414   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc03b
 00415   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc03d
 00416   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00417   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc03f
 00418   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00419   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc041
 00420   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00421   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc043
 00422   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc045
 00423   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00424   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc047
 00425   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00426   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc049
 00427   404   NtUserGetClassInfo  (1905590272, 1240592, 1240544, 1240620, 0, ... ) == 0xc049
 00428   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00429   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc04b
 00430   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00431   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc04d
 00432   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00433   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc04f
 00434   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc051
 00435   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00436   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc053
 00437   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00438   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc055
 00439   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc057
 00440   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00441   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc059
 00442   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10013
 00443   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc05b
 00444   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00445   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc05d
 00446   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00447   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc05f
 00448   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00449   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc017
 00450   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00451   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc019
 00452   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10013
 00453   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc018
 00454   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00455   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc01a
 00456   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00457   404   NtUserRegisterClassExWOW  (1240428, 1240508, 1240492, 1240524, 0, 384, 0, ... ) == 0x810dc01c
 00458   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00459   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ...
 00460   404   NtAllocateVirtualMemory  (-1, 6062080, 0, 4096, 4096, 32, ... 6062080, 4096, ) == 0x0
 00459   404   NtUserRegisterClassExWOW  ... ) == 0x810dc01e
 00461   404   NtUserFindExistingCursorIcon  (1239976, 1239992, 1240560, ... ) == 0x10011
 00462   404   NtUserRegisterClassExWOW  (1240488, 1240568, 1240552, 1240584, 0, 384, 0, ... ) == 0x810dc01b
 00463   404   NtUserFindExistingCursorIcon  (1239972, 1239988, 1240556, ... ) == 0x10011
 00464   404   NtUserRegisterClassExWOW  (1240484, 1240564, 1240548, 1240580, 0, 384, 0, ... ) == 0x810dc068
 00465   404   NtUserFindExistingCursorIcon  (1239980, 1239996, 1240564, ... ) == 0x10011
 00466   404   NtUserRegisterClassExWOW  (1240432, 1240512, 1240496, 1240528, 0, 384, 0, ... ) == 0x810dc06a
 00467   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00468   404   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77340000), 0x0, 569344, ) == 0x0
 00469   404   NtClose  (56, ... ) == 0x0
 00470   404   NtOpenProcess  (0x400, {24, 0, 0x0, 0, 0, 0x0}, {396, 0}, ... 56, ) == 0x0
 00471   404   NtQueryInformationProcess  (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0
 00472   404   NtClose  (56, ... ) == 0x0
 00473   404   NtUserRegisterWindowMessage  ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a
 00474   404   NtUserSystemParametersInfo  (104, 0, 2000318720, 0, ... ) == 0x1
 00475   404   NtUserSystemParametersInfo  (38, 4, 2000318708, 0, ... ) == 0x1
 00476   404   NtOpenKey  (0x20019, {24, 64, 0x40, 0, 0,  (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00477   404   NtQueryValueKey  (56,  (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00478   404   NtClose  (56, ... ) == 0x0
 00479   404   NtUserSystemParametersInfo  (41, 500, 1241332, 0, ... ) == 0x1
 00480   404   NtUserSystemParametersInfo  (102, 0, 2000318732, 0, ... ) == 0x1
 00481   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00482   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00483   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc03b
 00484   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00485   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc03d
 00486   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00487   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00488   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc03f
 00489   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00490   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00491   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc041
 00492   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00493   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00494   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc043
 00495   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00496   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc045
 00497   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00498   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00499   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc047
 00500   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00501   404   NtUserFindExistingCursorIcon  (1241120, 1241136, 1241704, ... ) == 0x10011
 00502   404   NtUserRegisterClassExWOW  (1241572, 1241652, 1241636, 1241668, 0, 384, 0, ... ) == 0x810dc049
 00503   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00504   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00505   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc04b
 00506   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00507   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00508   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc04d
 00509   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00510   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00511   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc04f
 00512   404   NtUserGetClassInfo  (1999896576, 1241744, 1241696, 1241772, 0, ... ) == 0x0
 00513   404   NtUserRegisterClassExWOW  (1241580, 1241660, 1241644, 1241676, 0, 384, 0, ... ) == 0x810dc051
 00514   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00515   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00516   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc053
 00517   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00518   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00519   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc055
 00520   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc057
 00521   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00522   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00523   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc059
 00524   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00525   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10013
 00526   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc05b
 00527   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00528   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00529   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc05d
 00530   404   NtUserGetClassInfo  (1999896576, 1241740, 1241692, 1241768, 0, ... ) == 0x0
 00531   404   NtUserFindExistingCursorIcon  (1241124, 1241140, 1241708, ... ) == 0x10011
 00532   404   NtUserRegisterClassExWOW  (1241576, 1241656, 1241640, 1241672, 0, 384, 0, ... ) == 0x810dc05f
 00533   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03b
 00534   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03d
 00535   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc03f
 00536   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc041
 00537   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc043
 00538   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc045
 00539   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc047
 00540   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc049
 00541   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04b
 00542   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04d
 00543   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc04f
 00544   404   NtUserGetClassInfo  (1999896576, 1243496, 1243448, 1243524, 0, ... ) == 0xc051
 00545   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc053
 00546   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc055
 00547   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc059
 00548   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05b
 00549   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05d
 00550   404   NtUserGetClassInfo  (1999896576, 1243492, 1243444, 1243520, 0, ... ) == 0xc05f
 00551   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00552   404   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00553   404   NtTestAlert  (... ) == 0x0
 00554   404   NtContinue  (1244464, 1, ...
 00555   404   NtSetInformationThread  (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x401000,}, 4, ... ) == 0x0
 00556   404   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9437184, 196608, ) == 0x0
 00557   404   NtAllocateVirtualMemory  (-1, 0, 0, 196608, 4096, 64, ... 9633792, 196608, ) == 0x0
 00558   404   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 196608, ) == 0x0
 00559   404   NtAllocateVirtualMemory  (-1, 0, 0, 1350, 4096, 4, ... 9306112, 4096, ) == 0x0
 00560   404   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00561   404   NtAllocateVirtualMemory  (-1, 0, 0, 148480, 4096, 4, ... 9437184, 151552, ) == 0x0
 00562   404   NtFreeVirtualMemory  (-1, (0x900000), 0, 32768, ... (0x900000), 151552, ) == 0x0
 00563   404   NtAllocateVirtualMemory  (-1, 0, 0, 2560, 4096, 4, ... 9306112, 4096, ) == 0x0
 00564   404   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00565   404   NtAllocateVirtualMemory  (-1, 0, 0, 3584, 4096, 4, ... 9306112, 4096, ) == 0x0
 00566   404   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 4096, ) == 0x0
 00567   404   NtAllocateVirtualMemory  (-1, 0, 0, 8704, 4096, 4, ... 9306112, 12288, ) == 0x0
 00568   404   NtFreeVirtualMemory  (-1, (0x8e0000), 0, 32768, ... (0x8e0000), 12288, ) == 0x0
 00569   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "version.dll"}, ... 56, ) }, ... 56, ) == 0x0
 00570   404   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c00000), 0x0, 28672, ) == 0x0
 00571   404   NtClose  (56, ... ) == 0x0
 00572   404   NtOpenSection  (0xe, {24, 8, 0x40, 0, 0,  (0xe, {24, 8, 0x40, 0, 0, "wsock32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00573   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00574   404   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00575   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 1243008, ... ) }, 1243008, ... ) == 0x0
 00576   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\wsock32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00577   404   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00578   404   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00579   404   NtClose  (56, ... ) == 0x0
 00580   404   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ad0000), 0x0, 32768, ) == 0x0
 00581   404   NtClose  (68, ... ) == 0x0
 00582   404   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00583   404   NtOpenKey  (0xf003f, {24, 64, 0x40, 0, 0,  (0xf003f, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00584   404   NtOpenProcessToken  (-1, 0x8, ... 68, ) == 0x0
 00585   404   NtQueryInformationToken  (68, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0
 00586   404   NtClose  (68, ... ) == 0x0
 00587   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00588   404   NtReleaseMutant  (16, ...
 00589   404   NtContinue  (-130908024, 0, ...
 00588   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00590   404   NtUserCallOneParam  (0, 40, ... ) == 0x4
 00591   404   NtAllocateVirtualMemory  (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0
 00592   404   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 9830400, 1048576, ) == 0x0
 00593   404   NtAllocateVirtualMemory  (-1, 9830400, 0, 16384, 4096, 4, ... 9830400, 16384, ) == 0x0
 00594   404   NtUserCallNoParam  (29, ...
 00595   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242276, ... ) }, 1242276, ... ) == 0x0
 00596   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 68, {status=0x0, info=1}, ) }, 5, 96, ... 68, {status=0x0, info=1}, ) == 0x0
 00597   404   NtCreateSection  (0xe, 0x0, 0x0, 16, 134217728, 68, ... 56, ) == 0x0
 00598   404   NtClose  (68, ... ) == 0x0
 00599   404   NtMapViewOfSection  (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0xa60000), 0x0, 204800, ) == 0x0
 00600   404   NtClose  (56, ... ) == 0x0
 00601   404   NtUnmapViewOfSection  (-1, 0xa60000, ... ) == 0x0
 00602   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1242592, ... ) }, 1242592, ... ) == 0x0
 00603   404   NtOpenFile  (0x100020, {24, 0, 0x40, 0, 0,  (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0
 00604   404   NtCreateSection  (0xf, 0x0, 0x0, 16, 16777216, 56, ... 68, ) == 0x0
 00605   404   NtQuerySection  (68, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0
 00606   404   NtClose  (56, ... ) == 0x0
 00607   404   NtMapViewOfSection  (68, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5ad70000), 0x0, 212992, ) == 0x0
 00608   404   NtClose  (68, ... ) == 0x0
 00609   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00610   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00611   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00612   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00613   404   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00614   404   NtClose  (68, ... ) == 0x0
 00615   404   NtOpenKey  (0x2001f, {24, 0, 0x640, 0, 0,  (0x2001f, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00616   404   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\ThemeManager"}, ... 56, ) }, ... 56, ) == 0x0
 00617   404   NtQueryValueKey  (56,  (56, "Compositing", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00618   404   NtClose  (56, ... ) == 0x0
 00619   404   NtClose  (68, ... ) == 0x0
 00620   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00621   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 68, ) == 0x0
 00622   404   NtQueryInformationToken  (68, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00623   404   NtClose  (68, ... ) == 0x0
 00624   404   NtOpenKey  (0x20019, {24, 0, 0x640, 0, 0,  (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003"}, ... 68, ) }, ... 68, ) == 0x0
 00625   404   NtOpenKey  (0x1, {24, 68, 0x40, 0, 0,  (0x1, {24, 68, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0
 00626   404   NtQueryValueKey  (56,  (56, "LameButtonText", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00627   404   NtClose  (56, ... ) == 0x0
 00628   404   NtClose  (68, ... ) == 0x0
 00629   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\u:\work\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00630   404   NtQueryAttributesFile  ({24, 12, 0x40, 0, 0,  ({24, 12, 0x40, 0, 0, "UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00631   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\System32\UxTheme.dll"}, 1242092, ... ) }, 1242092, ... ) == 0x0
 00632   404   NtUserGetProcessWindowStation  (... ) == 0x28
 00633   404   NtUserGetObjectInformation  (40, 2, 0, 0, 1244388, ... ) == 0x0
 00634   404   NtUserGetObjectInformation  (40, 2, 1330792, 16, 1244388, ... ) == 0x1
 00635   404   NtUserGetGUIThreadInfo  (404, 1244344, ... ) == 0x1
 00636   404   NtConnectPort  ( ("\ThemeApiPort", {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) , {12, 2, 1, 1}, 0x0, 0x0, 1244164, 64, ... 68, 0x0, 0x0, 0x0, 64, ) == 0x0
 00637   404   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 396, 404, 1498, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 396, 404, 1498, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 396, 404, 1498, 0} "\0\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00638   404   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 396, 404, 1499, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 396, 404, 1499, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\355\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 396, 404, 1499, 0} "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00639   404   NtUserCallNoParam  (29, ...
 00640   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241636, ... ) }, 1241636, ... ) == 0x0
 00639   404   NtUserCallNoParam  ... ) == 0x0
 00641   404   NtUserSystemParametersInfo  (41, 0, 1524225160, 0, ... ) == 0x1
 00642   404   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327520, ... ) == 0x120a0418
 00643   404   NtGdiHfontCreate  (1243716, 356, 0, 0, 1327512, ... ) == 0x90a0409
 00644   404   NtRequestWaitReplyPort  (68, {32, 56, new_msg, 0, 0, 0, 0, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 396, 404, 1500, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ... {32, 56, reply, 0, 396, 404, 1500, 0}  (68, {32, 56, new_msg, 0, 0, 0, 0, 0} "\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" ... {32, 56, reply, 0, 396, 404, 1500, 0} "\0\0\0\0\0\0\0\08\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0" )  ) == 0x0
 00645   404   NtMapViewOfSection  (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0xa60000), {0, 0}, 331776, ) == 0x0
 00646   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00647   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00648   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00649   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00650   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00651   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00652   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00653   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00654   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00655   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00656   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00657   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00658   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00659   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00660   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00661   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00662   404   NtUserGetWindowDC  (0, ... ) == 0x1010054
 00663   404   NtGdiCreatePatternBrushInternal  (59048369, 0, 0, ... ) == 0xc1003fd
 00664   404   NtUserCallOneParam  (16842836, 56, ... ) == 0x1
 00665   404   NtUserCallNoParam  (29, ...
 00666   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241080, ... ) }, 1241080, ... ) == 0x0
 00665   404   NtUserCallNoParam  ... ) == 0x0
 00667   404   NtUserCallNoParam  (29, ...
 00668   404   NtQueryAttributesFile  ({24, 0, 0x40, 0, 0,  ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\uxtheme.dll"}, 1241076, ... ) }, 1241076, ... ) == 0x0
 00667   404   NtUserCallNoParam  ... ) == 0x0
 00594   404   NtUserCallNoParam  ... ) == 0x1
 00669   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00670   404   NtReleaseMutant  (16, ...
 00671   404   NtContinue  (-130908024, 0, ...
 00670   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00672   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00673   404   NtReleaseMutant  (16, ...
 00674   404   NtContinue  (-130908024, 0, ...
 00673   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00675   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00676   404   NtReleaseMutant  (16, ...
 00677   404   NtContinue  (-130908024, 0, ...
 00676   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00678   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00679   404   NtReleaseMutant  (16, ...
 00680   404   NtContinue  (-130908024, 0, ...
 00679   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00681   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00682   404   NtReleaseMutant  (16, ...
 00683   404   NtContinue  (-130908024, 0, ...
 00682   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00684   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00685   404   NtReleaseMutant  (16, ...
 00686   404   NtContinue  (-130908024, 0, ...
 00685   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00687   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00688   404   NtReleaseMutant  (16, ...
 00689   404   NtContinue  (-130908024, 0, ...
 00688   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00690   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00691   404   NtReleaseMutant  (16, ...
 00692   404   NtContinue  (-130908024, 0, ...
 00691   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00693   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00694   404   NtReleaseMutant  (16, ...
 00695   404   NtContinue  (-130908024, 0, ...
 00694   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00696   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00697   404   NtReleaseMutant  (16, ...
 00698   404   NtContinue  (-130908024, 0, ...
 00697   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00699   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00700   404   NtReleaseMutant  (16, ...
 00701   404   NtContinue  (-130908024, 0, ...
 00700   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00702   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00703   404   NtReleaseMutant  (16, ...
 00704   404   NtContinue  (-130908024, 0, ...
 00703   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00705   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00706   404   NtReleaseMutant  (16, ...
 00707   404   NtContinue  (-130908024, 0, ...
 00706   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00708   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00709   404   NtReleaseMutant  (16, ...
 00710   404   NtContinue  (-130908024, 0, ...
 00709   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00711   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00712   404   NtReleaseMutant  (16, ...
 00713   404   NtContinue  (-130908024, 0, ...
 00712   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00714   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00715   404   NtReleaseMutant  (16, ...
 00716   404   NtContinue  (-130908024, 0, ...
 00715   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00717   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00718   404   NtReleaseMutant  (16, ...
 00719   404   NtContinue  (-130908024, 0, ...
 00718   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00720   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 00721   404   NtReleaseMutant  (16, ...
 00722   404   NtContinue  (-130908024, 0, ...
 00721   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 00723   404   NtOpenKey  (0x2000000, {24, 28, 0x40, 0, 0,  (0x2000000, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\WinSock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00724   404   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00725   404   NtQueryValueKey  (72,  (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (72, "WinSock_Registry_Version", Partial, 144, ... TitleIdx=0, Type=1, Data="2\0.\00\0\0\0"}, 20, ) }, 20, ) == 0x0
 00726   404   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 76, ) == 0x0
 00727   404   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "Protocol_Catalog9"}, ... 80, ) }, ... 80, ) == 0x0
 00728   404   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00729   404   NtNotifyChangeKey  (80, 76, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00730   404   NtQueryValueKey  (80,  (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\31\0\0\0"}, 16, ) }, 16, ) == 0x0
 00731   404   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "00000019"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00732   404   NtQueryValueKey  (80,  (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Next_Catalog_Entry_ID", Partial, 144, ... TitleIdx=0, Type=4, Data="\376\3\0\0"}, 16, ) }, 16, ) == 0x0
 00733   404   NtQueryValueKey  (80,  (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (80, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\13\0\0\0"}, 16, ) }, 16, ) == 0x0
 00734   404   NtOpenKey  (0x2000000, {24, 80, 0x40, 0, 0,  (0x2000000, {24, 80, 0x40, 0, 0, "Catalog_Entries"}, ... 84, ) }, ... 84, ) == 0x0
 00735   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000001"}, ... 88, ) }, ... 88, ) == 0x0
 00736   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00737   404   NtAllocateVirtualMemory  (-1, 1339392, 0, 4096, 4096, 4, ... 1339392, 4096, ) == 0x0
 00738   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00739   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\351\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0T\0C\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\344\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\344\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\345\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\02\0\345\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\346\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\347\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00740   404   NtClose  (88, ... ) == 0x0
 00741   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000002"}, ... 88, ) }, ... 88, ) == 0x0
 00742   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00743   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00744   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\352\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0U\0D\0P\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\351\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\351\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\352\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\03\0\352\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\353\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\354\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00745   404   NtClose  (88, ... ) == 0x0
 00746   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000003"}, ... 88, ) }, ... 88, ) == 0x0
 00747   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00748   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00749   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\6\2\0\0\0\0\0\0\0\0\0\0\0\0\0\14\0\0\0\240\32\17\347\213\253\317\21\214\243\0\200_H\241\222\353\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\3\0\0\0\0\0\0\0\377\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0T\0c\0p\0i\0p\0 \0[\0R\0A\0W\0/\0I\0P\0]\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\3\0\0\356\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\356\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\357\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\04\0\357\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\360\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\361\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00750   404   NtClose  (88, ... ) == 0x0
 00751   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000004"}, ... 88, ) }, ... 88, ) == 0x0
 00752   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00753   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00754   404   NtAllocateVirtualMemory  (-1, 1343488, 0, 4096, 4096, 4, ... 1343488, 4096, ) == 0x0
 00755   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11&\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\354\3\0\0\1\0\0\0\310\371\252\1\26\0\30\0\10<_u\0\0\0\0|\370\252\1\27\207`u\0\0\0\0\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\2\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\273\377\0\0\0\0\0\0R\0S\0V\0P\0 \0U\0D\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\30\371\252\1\17.\365w\13\30\365w\1\0\0\0\0\374\252\1\4\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\17.\365w\0\0\0\0\250\371\252\1 \22\365wO\22\365wT\22\365w\0\0\0\0\204\3\0\0\364\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\364\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\365\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\05\0\365\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\366\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\367\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00756   404   NtClose  (88, ... ) == 0x0
 00757   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000005"}, ... 88, ) }, ... 88, ) == 0x0
 00758   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00759   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00760   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\rsvpsp.dll\0\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0f \2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\340\251`\235z3\320\21\275\210\0\0\300\202\346\232\355\3\0\0\1\0\0\0\17.\365w\13\30\365w\0\0\0\0\4+Y\1\2\0\0\0\1\0\0\0\17.\365w\6\0\0\0\2\0\0\0\20\0\0\0\20\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0R\0S\0V\0P\0 \0T\0C\0P\0 \0S\0e\0r\0v\0i\0c\0e\0 \0P\0r\0o\0v\0i\0d\0e\0r\0\0\0\0\0\0\0\362_du\3`du\240\1\10\0\250\5N\1 \0\0\0\0\0\0\0\240\1\10\0\310\5N\1H\344\301\0\0\0\0\0\0\0\0\0\0\0\245\0\0\0\10\0@\5N\1\0\0\0\0\204\3\0\0\371\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\371\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\372\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\06\0\372\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\373\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\374\2\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00761   404   NtClose  (88, ... ) == 0x0
 00762   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000006"}, ... 88, ) }, ... 88, ) == 0x0
 00763   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00764   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00765   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\356\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\376\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\376\2\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\377\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\07\0\377\2\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\0\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\1\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00766   404   NtClose  (88, ... ) == 0x0
 00767   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000007"}, ... 88, ) }, ... 88, ) == 0x0
 00768   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00769   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00770   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\357\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\0\0\0\200\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\04\0F\0E\05\07\0D\07\0B\0-\00\03\0A\05\0-\04\08\0B\02\0-\08\0\0\0\0\0\204\3\0\0\3\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\3\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\4\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\08\0\4\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\5\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\6\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00771   404   NtClose  (88, ... ) == 0x0
 00772   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000008"}, ... 88, ) }, ... 88, ) == 0x0
 00773   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00774   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00775   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\360\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\10\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\10\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\11\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\00\09\0\11\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\12\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\13\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00776   404   NtClose  (88, ... ) == 0x0
 00777   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000009"}, ... 88, ) }, ... 88, ) == 0x0
 00778   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00779   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00780   404   NtAllocateVirtualMemory  (-1, 1347584, 0, 4096, 4096, 4, ... 1347584, 4096, ) == 0x0
 00781   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\361\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0A\0B\0E\07\0E\00\06\0F\0-\06\02\00\0F\0-\04\0E\0A\0A\0-\0A\0\0\0\0\0\204\3\0\0\16\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\16\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\17\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\00\0\17\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\20\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\21\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00782   404   NtClose  (88, ... ) == 0x0
 00783   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000010"}, ... 88, ) }, ... 88, ) == 0x0
 00784   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00785   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00786   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) \0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0 (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\16\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\362\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\5\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\23\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\23\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\24\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0H\0\0\0\31\0\2\0\0\0\0\0\30\0\0\0T\0\0\0\\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\0\32\0Hl\24\0\0\0\0\00\00\00\00\00\00\00\00\00\00\01\01\0\24\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0X\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0t\0e\0m\0\24\0\2\0\0\0\220\0\0\0\25\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\1\0\1\0\5\0\0\200\0\0\0\0\26\3\0\0\214\1\0\0\224\1\0\0\200\0\0\0\0\0\1\0\0\0\0\0@\0\0\0X\0\0\0\0\0\0\0"\0\12\2\0\354\375\177\0\0\0\0P\0a\0c\0k\0e\0d\0C\0a\0t\0a\0l\0o\0g\0I\0"}, 900, ) }, 900, ) == 0x0
 00787   404   NtClose  (88, ... ) == 0x0
 00788   404   NtOpenKey  (0x20019, {24, 84, 0x40, 0, 0,  (0x20019, {24, 84, 0x40, 0, 0, "000000000011"}, ... 88, ) }, ... 88, ) == 0x0
 00789   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00790   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_BUFFER_OVERFLOW
 00791   404   NtQueryValueKey  (88,  (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\214\1\0\0\224\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\214\1\0\0\224\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\214\1\0\0\224\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\214\1\0\0\224\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) , Partial, 900, ... TitleIdx=0, Type=3, Data= (88, "PackedCatalogItem", Partial, 900, ... TitleIdx=0, Type=3, Data="%SystemRoot%\system32\mswsock.dll\0gram\FSLSP.DLL\0\00\0\0\0\10\0\2\0\10\0\4\1\10\0h\220\354\28\220\354\2\2\0\12\0\4\1\12\00\00\0\0\0\10\0\2\0\14\0\4\1\10\0\210\220\354\2X\220\354\2\2\0\16\0\4\1\12\00\00\0\0\0\10\0\2\0\20\0\4\1\10\0\250\220\354\2x\220\354\2\2\0\22\0\4\1\12\00\00\0\0\0\10\0\2\0\24\0\4\1\10\0\310\220\354\2\230\220\354\2\2\0\26\0\4\1\12\00\00\0\0\0\10\0\2\0\30\0\4\1\10\0\0\0\0\0\270\220\354\2\2\0\32\0\4\1\10\0H\0K\0R\0\0\0\3\0\34\0\4\1\10\0\360\222\354\2\0\0\0\0\0\221\354\2\16\0\0\0<\0\37\0\4\0\10\0X\3\10\0X\3\10\0\4\0\2\0\11\2\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\00\30_\215s\302\317\21\225\310\0\200_H\241\222\363\3\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\21\0\0\0\24\0\0\0\24\0\0\0\2\0\0\0\376\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\0\372\0\0\0\0\0\0M\0S\0A\0F\0D\0 \0N\0e\0t\0B\0I\0O\0S\0 \0[\0\\0D\0e\0v\0i\0c\0e\0\\0N\0e\0t\0B\0T\0_\0T\0c\0p\0i\0p\0_\0{\0D\01\09\0D\0F\08\08\02\0-\0A\09\0C\0B\0-\04\01\04\04\0-\08\0\0\0\0\0\204\3\0\0\30\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0X\0\0\0\30\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\31\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\0\0\1\0\0\0\0\0\4\0\0\0T\0\0\0\31\3\0\0\214\1\0\0\224\1\0\0\17\0\0\0\1\0\1\0\0\0\0\0\0\0\0\0\32\3\0\0\214\1\0\0\224\1\0\0\305\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0L\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\3\0\0\214\1\0\0\224\1\0\0\305\0\0\0\1\0\1\0\2\1\0\0\0\0\0\0\33\3\0\0\214\1\0\0\224\1\0\0\25\0\0\0\0\0\1\0\0\0\0\0\24\0\0\0\3\0\37\0\377\377\377\377\0\0\0\0\0\0\0\0\0\0\0\0\33\3\0\0\214\1\0\0\224\1\0\0\25\0\0\0\1\0\1\0\0\0\0\0\10\0\0\0\0\0\0\0T\0\0\0\34\3\0\0\214\1\0\0\224\1\0\0Q\0\0\0\0\0\1\0\0\0\0\0T\0\0\0\0\0\0\2\0\0\0\0\30\0\0\0H\0\0\0x\374\22\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\0&\0\30l\24\0\0\0\0\0N\0a\0m\0e\0S\0p\0a\0c\0e\0_\0C\0a\0t\0a\0l\0o\0g\05\0"}, 900, ) }, 900, ) == 0x0
 00792   404   NtClose  (88, ... ) == 0x0
 00793   404   NtClose  (84, ... ) == 0x0
 00794   404   NtWaitForSingleObject  (76, 0, {0, 0}, ... ) == 0x102
 00795   404   NtCreateEvent  (0x1f0003, 0x0, 0, 0, ... 84, ) == 0x0
 00796   404   NtOpenKey  (0x2000000, {24, 72, 0x40, 0, 0,  (0x2000000, {24, 72, 0x40, 0, 0, "NameSpace_Catalog5"}, ... 88, ) }, ... 88, ) == 0x0
 00797   404   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00798   404   NtNotifyChangeKey  (88, 84, 0, 0, 2011390432, 1, 0, 0, 0, 1, ... ) == 0x103
 00799   404   NtQueryValueKey  (88,  (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Serial_Access_Num", Partial, 144, ... TitleIdx=0, Type=4, Data="\4\0\0\0"}, 16, ) }, 16, ) == 0x0
 00800   404   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "00000004"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00801   404   NtQueryValueKey  (88,  (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (88, "Num_Catalog_Entries", Partial, 144, ... TitleIdx=0, Type=4, Data="\3\0\0\0"}, 16, ) }, 16, ) == 0x0
 00802   404   NtOpenKey  (0x2000000, {24, 88, 0x40, 0, 0,  (0x2000000, {24, 88, 0x40, 0, 0, "Catalog_Entries"}, ... 92, ) }, ... 92, ) == 0x0
 00803   404   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000001"}, ... 96, ) }, ... 96, ) == 0x0
 00804   404   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00805   404   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00806   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00807   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00808   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00809   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="T\0c\0p\0i\0p\0\0\0"}, 24, ) }, 24, ) == 0x0
 00810   404   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="@\235\5"\236~\317\21\256Z\0\252\0\247\21+"}, 28, ) \236~\317\21\256Z\0\252\0\247\21+"}, 28, ) == 0x0
 00811   404   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00812   404   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\14\0\0\0"}, 16, ) }, 16, ) == 0x0
 00813   404   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00814   404   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00815   404   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00816   404   NtClose  (96, ... ) == 0x0
 00817   404   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000002"}, ... 96, ) }, ... 96, ) == 0x0
 00818   404   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00819   404   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0w\0i\0n\0r\0n\0r\0.\0d\0l\0l\0\0\0"}, 78, ) }, 78, ) == 0x0
 00820   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00821   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00822   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00823   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0T\0D\0S\0\0\0"}, 22, ) }, 22, ) == 0x0
 00824   404   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data="\3567&;\200\345\317\21\245U\0\300O\330\324\254"}, 28, ) }, 28, ) == 0x0
 00825   404   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00826   404   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data=" \0\0\0"}, 16, ) }, 16, ) == 0x0
 00827   404   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00828   404   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00829   404   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00830   404   NtClose  (96, ... ) == 0x0
 00831   404   NtAllocateVirtualMemory  (-1, 1351680, 0, 4096, 4096, 4, ... 1351680, 4096, ) == 0x0
 00832   404   NtOpenKey  (0x20019, {24, 92, 0x40, 0, 0,  (0x20019, {24, 92, 0x40, 0, 0, "000000000003"}, ... 96, ) }, ... 96, ) == 0x0
 00833   404   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00834   404   NtQueryValueKey  (96,  (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "LibraryPath", Partial, 144, ... TitleIdx=0, Type=1, Data="%\0S\0y\0s\0t\0e\0m\0R\0o\0o\0t\0%\0\\0S\0y\0s\0t\0e\0m\03\02\0\\0m\0s\0w\0s\0o\0c\0k\0.\0d\0l\0l\0\0\0"}, 80, ) }, 80, ) == 0x0
 00835   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00836   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00837   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00838   404   NtQueryValueKey  (96,  (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) , Partial, 144, ... TitleIdx=0, Type=1, Data= (96, "DisplayString", Partial, 144, ... TitleIdx=0, Type=1, Data="N\0e\0t\0w\0o\0r\0k\0 \0L\0o\0c\0a\0t\0i\0o\0n\0 \0A\0w\0a\0r\0e\0n\0e\0s\0s\0 \0(\0N\0L\0A\0)\0 \0N\0a\0m\0e\0s\0p\0a\0c\0e\0\0\0"}, 98, ) }, 98, ) == 0x0
 00839   404   NtQueryValueKey  (96,  (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) , Partial, 144, ... TitleIdx=0, Type=3, Data= (96, "ProviderId", Partial, 144, ... TitleIdx=0, Type=3, Data=":$Bf\250;\246J\272\245.\13\327\37\335\203"}, 28, ) }, 28, ) == 0x0
 00840   404   NtQueryValueKey  (96,  (96, "AddressFamily", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00841   404   NtQueryValueKey  (96,  (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "SupportedNameSpace", Partial, 144, ... TitleIdx=0, Type=4, Data="\17\0\0\0"}, 16, ) }, 16, ) == 0x0
 00842   404   NtQueryValueKey  (96,  (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Enabled", Partial, 144, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0
 00843   404   NtQueryValueKey  (96,  (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "Version", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00844   404   NtQueryValueKey  (96,  (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (96, "StoresServiceClassInfo", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0
 00845   404   NtClose  (96, ... ) == 0x0
 00846   404   NtClose  (92, ... ) == 0x0
 00847   404   NtWaitForSingleObject  (84, 0, {0, 0}, ... ) == 0x102
 00848   404   NtClose  (72, ... ) == 0x0
 00849   404   NtQuerySystemInformation  (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0
 00850   404   NtQuerySystemInformation  (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0
 00851   404   NtOpenKey  (0x1, {24, 28, 0x40, 0, 0,  (0x1, {24, 28, 0x40, 0, 0, "System\CurrentControlSet\Services\Winsock2\Parameters"}, ... 72, ) }, ... 72, ) == 0x0
 00852   404   NtQueryValueKey  (72,  (72, "Ws2_32NumHandleBuckets", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00853   404   NtClose  (72, ... ) == 0x0
 00854   404   NtDuplicateObject  (-1, -2, -1, 0x0, 0, 2, ... 72, ) == 0x0
 00855   404   NtAllocateVirtualMemory  (-1, 0, 0, 17, 4096, 64, ... 9306112, 4096, ) == 0x0
 00856   404   NtAllocateVirtualMemory  (-1, 0, 0, 21, 4096, 64, ... 9437184, 4096, ) == 0x0
 00857   404   NtAllocateVirtualMemory  (-1, 0, 0, 310, 4096, 64, ... 9502720, 4096, ) == 0x0
 00858   404   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00859   404   NtFreeVirtualMemory  (-1, (0x974000), 16384, 16384, ... (0x974000), 16384, ) == 0x0
 00860   404   NtFreeVirtualMemory  (-1, (0x964000), 65536, 16384, ... (0x964000), 65536, ) == 0x0
 00861   404   NtAllocateVirtualMemory  (-1, 9846784, 0, 32768, 4096, 4, ... 9846784, 32768, ) == 0x0
 00862   404   NtFreeVirtualMemory  (-1, (0x964000), 32768, 16384, ... (0x964000), 32768, ) == 0x0
 00863   404   NtAllocateVirtualMemory  (-1, 9846784, 0, 81920, 4096, 4, ... 9846784, 81920, ) == 0x0
 00864   404   NtFreeVirtualMemory  (-1, (0x964000), 81920, 16384, ... (0x964000), 81920, ) == 0x0
 00865   404   NtCreateFile  (0xc0100080, {24, 0, 0x40, 0, 1243880,  (0xc0100080, {24, 0, 0x40, 0, 1243880, "\??\Scsi0:"}, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) }, 0x0, 0, 3, 1, 96, 0, 0, ... 92, {status=0x0, info=0}, ) == 0x0
 00866   404   NtDeviceIoControlFile  (92, 0, 0x0, 0x0, 0x4d008,  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , 572, 572, ... {status=0x0, info=572},  (92, 0, 0x0, 0x0, 0x4d008, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\1\1\0\0\240\354\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 572, 572, ... {status=0x0, info=572}, "\34\0\0\0SCSIDISK\2\0\0\0\1\5\33\0\0\0\0\0 \2\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0zBa\30\0\0\20\0\0\0\0\0?\0\0\0\0\0\0\000000000000000000010\0\0@\0\0\000000010MVawerV riutlaI EDH ra drDvi e          @\200\0\0\0/\0\0\0\2\0\0\7\0a\30\20\0?\0\360\375_\0@\1\0\0`\0\0\0\7\0\3\0x\0x\0\240\0x\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\36\0\27\0\10@\10@\0@\10@\0@\0@\7\4\0\0\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", ) , ) == 0x0
 00867   404   NtClose  (92, ... ) == 0x0
 00868   404   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00869   404   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00870   404   NtQueryInformationFile  (92, 1243996, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00871   404   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00872   404   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00873   404   NtClose  (92, ... ) == 0x0
 00874   404   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00875   404   NtQueryVolumeInformationFile  (92, 1244780, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00876   404   NtClose  (92, ... ) == 0x0
 00877   404   NtQueryInformationProcess  (-1, DeviceMap, 36, ... {process info, class 23, size 36}, 0x0, ) == 0x0
 00878   404   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 16417, ... 92, {status=0x0, info=1}, ) }, 3, 16417, ... 92, {status=0x0, info=1}, ) == 0x0
 00879   404   NtQueryInformationFile  (92, 1244000, 528, Name, ... {status=0x0, info=6}, ) == 0x0
 00880   404   NtQueryVolumeInformationFile  (92, 1353096, 284, Volume, ... {status=0x0, info=18}, ) == 0x0
 00881   404   NtQueryVolumeInformationFile  (92, 1330816, 276, Attribute, ... {status=0x0, info=22}, ) == 0x0
 00882   404   NtClose  (92, ... ) == 0x0
 00883   404   NtOpenFile  (0x100001, {24, 0, 0x40, 0, 0,  (0x100001, {24, 0, 0x40, 0, 0, "\??\C:\"}, 3, 8388641, ... 92, {status=0x0, info=1}, ) }, 3, 8388641, ... 92, {status=0x0, info=1}, ) == 0x0
 00884   404   NtQueryVolumeInformationFile  (92, 1244784, 24, Size, ... {status=0x0, info=24}, ) == 0x0
 00885   404   NtClose  (92, ... ) == 0x0
 00886   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00887   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 92, ) == 0x0
 00888   404   NtQueryInformationToken  (92, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00889   404   NtClose  (92, ... ) == 0x0
 00890   404   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes"}, ... 92, ) }, ... 92, ) == 0x0
 00891   404   NtSetInformationObject  (94, Handle, {Inherit=0,ProtectFromClose=1,}, 1179904, ... ) == 0x0
 00892   404   NtQueryKey  (94, Name, 382, ... {Name= (94, Name, 382, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00893   404   NtOpenKey  (0x2000000, {24, 94, 0x40, 0, 0,  (0x2000000, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00894   404   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes"}, ... 96, ) }, ... 96, ) == 0x0
 00895   404   NtCreateKey  (0x2, {24, 96, 0x40, 0, 0,  (0x2, {24, 96, 0x40, 0, 0, ".key"}, 0, 0x0, 0, ... }, 0, 0x0, 0, ...
 00896   404   NtSetInformationFile  (-2147482808, -130907572, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00897   404   NtSetInformationFile  (-2147482808, -130907204, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00898   404   NtSetInformationFile  (-2147482808, -130907196, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0
 00895   404   NtCreateKey  ... 100, 1, ) == 0x0
 00899   404   NtClose  (96, ... ) == 0x0
 00900   404   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00901   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00902   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00903   404   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00904   404   NtClose  (96, ... ) == 0x0
 00905   404   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00906   404   NtSetValueKey  (102, 0x0, 0, 1,  (102, 0x0, 0, 1, "\0\0", 2, ... ) , 2, ... ) == 0x0
 00907   404   NtClose  (102, ... ) == 0x0
 00908   404   NtQueryKey  (94, Name, 384, ... {Name= (94, Name, 384, ... {Name="\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_CLASSES9"}, 138, ) }, 138, ) == 0x0
 00909   404   NtOpenKey  (0x2, {24, 94, 0x40, 0, 0,  (0x2, {24, 94, 0x40, 0, 0, ".key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00910   404   NtOpenKey  (0x2, {24, 0, 0x40, 0, 0,  (0x2, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\.key"}, ... 100, ) }, ... 100, ) == 0x0
 00911   404   NtQueryKey  (102, Name, 392, ... {Name= (102, Name, 392, ... {Name="\REGISTRY\MACHINE\SOFTWARE\Classes\.keyo"}, 82, ) }, 82, ) == 0x0
 00912   404   NtOpenThreadTokenEx  (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN
 00913   404   NtOpenProcessTokenEx  (-1, 0x20008, 512, ... 96, ) == 0x0
 00914   404   NtQueryInformationToken  (96, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0
 00915   404   NtClose  (96, ... ) == 0x0
 00916   404   NtOpenKey  (0x2000000, {24, 0, 0x40, 0, 0,  (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1078081533-484763869-839522115-1003_Classes\.key"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 00917   404   NtSetValueKey  (102, " (102, "", 0, 1, "r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) r\0e\0g\0f\0i\0l\0e\0\0\0", 16, ... ) == 0x0
 00918   404   NtClose  (102, ... ) == 0x0
 00919   404   NtContinue  (1244288, 0, ...
 00920   404   NtAllocateVirtualMemory  (-1, 0, 0, 122368, 4096, 4, ... 11272192, 122880, ) == 0x0
 00921   404   NtContinue  (1244272, 0, ...
 00922   404   NtAllocateVirtualMemory  (-1, 0, 0, 147456, 4096, 4, ... 11403264, 147456, ) == 0x0
 00923   404   NtContinue  (1244272, 0, ...
 00924   404   NtContinue  (1244280, 0, ...
 00925   404   NtContinue  (1244268, 0, ...
 00926   404   NtContinue  (1244280, 0, ...
 00927   404   NtContinue  (1244288, 0, ...
 00928   404   NtContinue  (1244280, 0, ...
 00929   404   NtContinue  (1244280, 0, ...
 00930   404   NtContinue  (1244280, 0, ...
 00931   404   NtContinue  (1244280, 0, ...
 00932   404   NtContinue  (1244280, 0, ...
 00933   404   NtContinue  (1244280, 0, ...
 00934   404   NtContinue  (1244280, 0, ...
 00935   404   NtFreeVirtualMemory  (-1, (0xac0000), 122368, 16384, ... (0xac0000), 122880, ) == 0x0
 00936   404   NtContinue  (1244288, 0, ...
 00937   404   NtContinue  (1244288, 0, ...
 00938   404   NtContinue  (1244288, 0, ...
 00939   404   NtContinue  (1244288, 0, ...
 00940   404   NtContinue  (1244288, 0, ...
 00941   404   NtContinue  (1244288, 0, ...
 00942   404   NtContinue  (1244288, 0, ...
 00943   404   NtContinue  (1244288, 0, ...
 00944   404   NtContinue  (1244288, 0, ...
 00945   404   NtContinue  (1244288, 0, ...
 00946   404   NtContinue  (1244288, 0, ...
 00947   404   NtContinue  (1244288, 0, ...
 00948   404   NtContinue  (1244288, 0, ...
 00949   404   NtContinue  (1244288, 0, ...
 00950   404   NtContinue  (1244288, 0, ...
 00951   404   NtContinue  (1244288, 0, ...
 00952   404   NtContinue  (1244288, 0, ...
 00953   404   NtContinue  (1244288, 0, ...
 00954   404   NtContinue  (1244288, 0, ...
 00955   404   NtContinue  (1244288, 0, ...
 00956   404   NtContinue  (1244288, 0, ...
 00957   404   NtContinue  (1244288, 0, ...
 00958   404   NtContinue  (1244288, 0, ...
 00959   404   NtContinue  (1244288, 0, ...
 00960   404   NtContinue  (1244288, 0, ...
 00961   404   NtContinue  (1244288, 0, ...
 00962   404   NtContinue  (1244288, 0, ...
 00963   404   NtContinue  (1244288, 0, ...
 00964   404   NtContinue  (1244288, 0, ...
 00965   404   NtContinue  (1244288, 0, ...
 00966   404   NtContinue  (1244288, 0, ...
 00967   404   NtContinue  (1244288, 0, ...
 00968   404   NtContinue  (1244288, 0, ...
 00969   404   NtContinue  (1244288, 0, ...
 00970   404   NtContinue  (1244288, 0, ...
 00971   404   NtContinue  (1244288, 0, ...
 00972   404   NtContinue  (1244288, 0, ...
 00973   404   NtContinue  (1244288, 0, ...
 00974   404   NtContinue  (1244288, 0, ...
 00975   404   NtContinue  (1244288, 0, ...
 00976   404   NtContinue  (1244288, 0, ...
 00977   404   NtContinue  (1244288, 0, ...
 00978   404   NtContinue  (1244288, 0, ...
 00979   404   NtContinue  (1244288, 0, ...
 00980   404   NtContinue  (1244288, 0, ...
 00981   404   NtContinue  (1244288, 0, ...
 00982   404   NtContinue  (1244288, 0, ...
 00983   404   NtContinue  (1244288, 0, ...
 00984   404   NtContinue  (1244288, 0, ...
 00985   404   NtContinue  (1244288, 0, ...
 00986   404   NtContinue  (1244288, 0, ...
 00987   404   NtContinue  (1244288, 0, ...
 00988   404   NtContinue  (1244288, 0, ...
 00989   404   NtContinue  (1244288, 0, ...
 00990   404   NtContinue  (1244288, 0, ...
 00991   404   NtContinue  (1244288, 0, ...
 00992   404   NtContinue  (1244288, 0, ...
 00993   404   NtContinue  (1244288, 0, ...
 00994   404   NtContinue  (1244288, 0, ...
 00995   404   NtContinue  (1244288, 0, ...
 00996   404   NtContinue  (1244288, 0, ...
 00997   404   NtContinue  (1244288, 0, ...
 00998   404   NtContinue  (1244288, 0, ...
 00999   404   NtContinue  (1244288, 0, ...
 01000   404   NtContinue  (1244288, 0, ...
 01001   404   NtContinue  (1244288, 0, ...
 01002   404   NtContinue  (1244288, 0, ...
 01003   404   NtContinue  (1244288, 0, ...
 01004   404   NtContinue  (1244288, 0, ...
 01005   404   NtContinue  (1244288, 0, ...
 01006   404   NtContinue  (1244288, 0, ...
 01007   404   NtContinue  (1244288, 0, ...
 01008   404   NtContinue  (1244288, 0, ...
 01009   404   NtContinue  (1244288, 0, ...
 01010   404   NtContinue  (1244288, 0, ...
 01011   404   NtContinue  (1244288, 0, ...
 01012   404   NtContinue  (1244288, 0, ...
 01013   404   NtContinue  (1244288, 0, ...
 01014   404   NtContinue  (1244288, 0, ...
 01015   404   NtContinue  (1244288, 0, ...
 01016   404   NtContinue  (1244288, 0, ...
 01017   404   NtContinue  (1244288, 0, ...
 01018   404   NtContinue  (1244288, 0, ...
 01019   404   NtContinue  (1244288, 0, ...
 01020   404   NtContinue  (1244288, 0, ...
 01021   404   NtContinue  (1244288, 0, ...
 01022   404   NtContinue  (1244288, 0, ...
 01023   404   NtContinue  (1244288, 0, ...
 01024   404   NtContinue  (1244288, 0, ...
 01025   404   NtContinue  (1244288, 0, ...
 01026   404   NtContinue  (1244288, 0, ...
 01027   404   NtContinue  (1244288, 0, ...
 01028   404   NtContinue  (1244288, 0, ...
 01029   404   NtContinue  (1244288, 0, ...
 01030   404   NtContinue  (1244288, 0, ...
 01031   404   NtContinue  (1244288, 0, ...
 01032   404   NtContinue  (1244288, 0, ...
 01033   404   NtContinue  (1244288, 0, ...
 01034   404   NtContinue  (1244288, 0, ...
 01035   404   NtContinue  (1244288, 0, ...
 01036   404   NtContinue  (1244288, 0, ...
 01037   404   NtContinue  (1244288, 0, ...
 01038   404   NtContinue  (1244288, 0, ...
 01039   404   NtContinue  (1244288, 0, ...
 01040   404   NtContinue  (1244288, 0, ...
 01041   404   NtContinue  (1244288, 0, ...
 01042   404   NtContinue  (1244288, 0, ...
 01043   404   NtContinue  (1244288, 0, ...
 01044   404   NtContinue  (1244288, 0, ...
 01045   404   NtContinue  (1244288, 0, ...
 01046   404   NtContinue  (1244288, 0, ...
 01047   404   NtContinue  (1244288, 0, ...
 01048   404   NtContinue  (1244288, 0, ...
 01049   404   NtContinue  (1244288, 0, ...
 01050   404   NtContinue  (1244288, 0, ...
 01051   404   NtContinue  (1244288, 0, ...
 01052   404   NtContinue  (1244288, 0, ...
 01053   404   NtContinue  (1244288, 0, ...
 01054   404   NtContinue  (1244288, 0, ...
 01055   404   NtContinue  (1244288, 0, ...
 01056   404   NtContinue  (1244288, 0, ...
 01057   404   NtContinue  (1244288, 0, ...
 01058   404   NtContinue  (1244288, 0, ...
 01059   404   NtContinue  (1244288, 0, ...
 01060   404   NtContinue  (1244288, 0, ...
 01061   404   NtContinue  (1244288, 0, ...
 01062   404   NtContinue  (1244288, 0, ...
 01063   404   NtContinue  (1244288, 0, ...
 01064   404   NtContinue  (1244288, 0, ...
 01065   404   NtContinue  (1244288, 0, ...
 01066   404   NtContinue  (1244288, 0, ...
 01067   404   NtContinue  (1244288, 0, ...
 01068   404   NtContinue  (1244288, 0, ...
 01069   404   NtContinue  (1244288, 0, ...
 01070   404   NtContinue  (1244288, 0, ...
 01071   404   NtContinue  (1244288, 0, ...
 01072   404   NtContinue  (1244288, 0, ...
 01073   404   NtContinue  (1244288, 0, ...
 01074   404   NtContinue  (1244288, 0, ...
 01075   404   NtContinue  (1244288, 0, ...
 01076   404   NtContinue  (1244288, 0, ...
 01077   404   NtContinue  (1244288, 0, ...
 01078   404   NtContinue  (1244288, 0, ...
 01079   404   NtContinue  (1244288, 0, ...
 01080   404   NtContinue  (1244288, 0, ...
 01081   404   NtContinue  (1244288, 0, ...
 01082   404   NtContinue  (1244288, 0, ...
 01083   404   NtContinue  (1244288, 0, ...
 01084   404   NtContinue  (1244288, 0, ...
 01085   404   NtContinue  (1244288, 0, ...
 01086   404   NtContinue  (1244288, 0, ...
 01087   404   NtContinue  (1244288, 0, ...
 01088   404   NtContinue  (1244288, 0, ...
 01089   404   NtContinue  (1244288, 0, ...
 01090   404   NtContinue  (1244288, 0, ...
 01091   404   NtContinue  (1244288, 0, ...
 01092   404   NtContinue  (1244288, 0, ...
 01093   404   NtContinue  (1244288, 0, ...
 01094   404   NtContinue  (1244288, 0, ...
 01095   404   NtContinue  (1244288, 0, ...
 01096   404   NtContinue  (1244288, 0, ...
 01097   404   NtContinue  (1244288, 0, ...
 01098   404   NtContinue  (1244288, 0, ...
 01099   404   NtContinue  (1244288, 0, ...
 01100   404   NtContinue  (1244288, 0, ...
 01101   404   NtContinue  (1244288, 0, ...
 01102   404   NtContinue  (1244288, 0, ...
 01103   404   NtContinue  (1244288, 0, ...
 01104   404   NtContinue  (1244288, 0, ...
 01105   404   NtContinue  (1244288, 0, ...
 01106   404   NtContinue  (1244288, 0, ...
 01107   404   NtContinue  (1244288, 0, ...
 01108   404   NtContinue  (1244288, 0, ...
 01109   404   NtContinue  (1244288, 0, ...
 01110   404   NtContinue  (1244288, 0, ...
 01111   404   NtContinue  (1244288, 0, ...
 01112   404   NtContinue  (1244288, 0, ...
 01113   404   NtContinue  (1244288, 0, ...
 01114   404   NtContinue  (1244288, 0, ...
 01115   404   NtContinue  (1244288, 0, ...
 01116   404   NtContinue  (1244288, 0, ...
 01117   404   NtContinue  (1244288, 0, ...
 01118   404   NtContinue  (1244288, 0, ...
 01119   404   NtContinue  (1244288, 0, ...
 01120   404   NtContinue  (1244288, 0, ...
 01121   404   NtContinue  (1244288, 0, ...
 01122   404   NtContinue  (1244288, 0, ...
 01123   404   NtContinue  (1244288, 0, ...
 01124   404   NtContinue  (1244288, 0, ...
 01125   404   NtContinue  (1244288, 0, ...
 01126   404   NtContinue  (1244288, 0, ...
 01127   404   NtContinue  (1244288, 0, ...
 01128   404   NtContinue  (1244288, 0, ...
 01129   404   NtContinue  (1244288, 0, ...
 01130   404   NtContinue  (1244288, 0, ...
 01131   404   NtContinue  (1244288, 0, ...
 01132   404   NtContinue  (1244288, 0, ...
 01133   404   NtContinue  (1244288, 0, ...
 01134   404   NtContinue  (1244288, 0, ...
 01135   404   NtContinue  (1244288, 0, ...
 01136   404   NtContinue  (1244288, 0, ...
 01137   404   NtContinue  (1244288, 0, ...
 01138   404   NtContinue  (1244288, 0, ...
 01139   404   NtContinue  (1244288, 0, ...
 01140   404   NtContinue  (1244288, 0, ...
 01141   404   NtContinue  (1244288, 0, ...
 01142   404   NtContinue  (1244288, 0, ...
 01143   404   NtContinue  (1244288, 0, ...
 01144   404   NtContinue  (1244288, 0, ...
 01145   404   NtContinue  (1244288, 0, ...
 01146   404   NtContinue  (1244288, 0, ...
 01147   404   NtContinue  (1244288, 0, ...
 01148   404   NtContinue  (1244288, 0, ...
 01149   404   NtContinue  (1244288, 0, ...
 01150   404   NtContinue  (1244288, 0, ...
 01151   404   NtContinue  (1244288, 0, ...
 01152   404   NtContinue  (1244288, 0, ...
 01153   404   NtContinue  (1244288, 0, ...
 01154   404   NtContinue  (1244288, 0, ...
 01155   404   NtContinue  (1244288, 0, ...
 01156   404   NtContinue  (1244288, 0, ...
 01157   404   NtContinue  (1244288, 0, ...
 01158   404   NtContinue  (1244288, 0, ...
 01159   404   NtContinue  (1244288, 0, ...
 01160   404   NtContinue  (1244288, 0, ...
 01161   404   NtContinue  (1244288, 0, ...
 01162   404   NtContinue  (1244288, 0, ...
 01163   404   NtContinue  (1244288, 0, ...
 01164   404   NtContinue  (1244288, 0, ...
 01165   404   NtContinue  (1244288, 0, ...
 01166   404   NtContinue  (1244288, 0, ...
 01167   404   NtContinue  (1244288, 0, ...
 01168   404   NtContinue  (1244288, 0, ...
 01169   404   NtContinue  (1244288, 0, ...
 01170   404   NtContinue  (1244288, 0, ...
 01171   404   NtContinue  (1244288, 0, ...
 01172   404   NtContinue  (1244288, 0, ...
 01173   404   NtContinue  (1244288, 0, ...
 01174   404   NtContinue  (1244288, 0, ...
 01175   404   NtContinue  (1244288, 0, ...
 01176   404   NtContinue  (1244288, 0, ...
 01177   404   NtContinue  (1244288, 0, ...
 01178   404   NtContinue  (1244288, 0, ...
 01179   404   NtContinue  (1244288, 0, ...
 01180   404   NtContinue  (1244288, 0, ...
 01181   404   NtContinue  (1244288, 0, ...
 01182   404   NtContinue  (1244288, 0, ...
 01183   404   NtContinue  (1244288, 0, ...
 01184   404   NtContinue  (1244288, 0, ...
 01185   404   NtContinue  (1244288, 0, ...
 01186   404   NtContinue  (1244288, 0, ...
 01187   404   NtContinue  (1244288, 0, ...
 01188   404   NtContinue  (1244288, 0, ...
 01189   404   NtContinue  (1244288, 0, ...
 01190   404   NtContinue  (1244288, 0, ...
 01191   404   NtContinue  (1244288, 0, ...
 01192   404   NtContinue  (1244288, 0, ...
 01193   404   NtContinue  (1244288, 0, ...
 01194   404   NtContinue  (1244288, 0, ...
 01195   404   NtContinue  (1244288, 0, ...
 01196   404   NtContinue  (1244288, 0, ...
 01197   404   NtContinue  (1244288, 0, ...
 01198   404   NtContinue  (1244288, 0, ...
 01199   404   NtContinue  (1244288, 0, ...
 01200   404   NtContinue  (1244288, 0, ...
 01201   404   NtContinue  (1244288, 0, ...
 01202   404   NtContinue  (1244288, 0, ...
 01203   404   NtContinue  (1244288, 0, ...
 01204   404   NtContinue  (1244288, 0, ...
 01205   404   NtContinue  (1244288, 0, ...
 01206   404   NtContinue  (1244288, 0, ...
 01207   404   NtContinue  (1244288, 0, ...
 01208   404   NtContinue  (1244288, 0, ...
 01209   404   NtContinue  (1244288, 0, ...
 01210   404   NtContinue  (1244288, 0, ...
 01211   404   NtContinue  (1244288, 0, ...
 01212   404   NtContinue  (1244288, 0, ...
 01213   404   NtContinue  (1244288, 0, ...
 01214   404   NtContinue  (1244288, 0, ...
 01215   404   NtContinue  (1244288, 0, ...
 01216   404   NtContinue  (1244288, 0, ...
 01217   404   NtContinue  (1244288, 0, ...
 01218   404   NtContinue  (1244288, 0, ...
 01219   404   NtContinue  (1244288, 0, ...
 01220   404   NtContinue  (1244288, 0, ...
 01221   404   NtContinue  (1244288, 0, ...
 01222   404   NtContinue  (1244288, 0, ...
 01223   404   NtContinue  (1244288, 0, ...
 01224   404   NtContinue  (1244288, 0, ...
 01225   404   NtContinue  (1244288, 0, ...
 01226   404   NtContinue  (1244288, 0, ...
 01227   404   NtContinue  (1244288, 0, ...
 01228   404   NtContinue  (1244288, 0, ...
 01229   404   NtContinue  (1244288, 0, ...
 01230   404   NtContinue  (1244288, 0, ...
 01231   404   NtContinue  (1244288, 0, ...
 01232   404   NtContinue  (1244288, 0, ...
 01233   404   NtContinue  (1244288, 0, ...
 01234   404   NtContinue  (1244288, 0, ...
 01235   404   NtContinue  (1244288, 0, ...
 01236   404   NtContinue  (1244288, 0, ...
 01237   404   NtContinue  (1244288, 0, ...
 01238   404   NtContinue  (1244288, 0, ...
 01239   404   NtContinue  (1244288, 0, ...
 01240   404   NtContinue  (1244288, 0, ...
 01241   404   NtContinue  (1244288, 0, ...
 01242   404   NtContinue  (1244288, 0, ...
 01243   404   NtContinue  (1244288, 0, ...
 01244   404   NtContinue  (1244288, 0, ...
 01245   404   NtContinue  (1244288, 0, ...
 01246   404   NtContinue  (1244288, 0, ...
 01247   404   NtContinue  (1244288, 0, ...
 01248   404   NtContinue  (1244288, 0, ...
 01249   404   NtContinue  (1244288, 0, ...
 01250   404   NtContinue  (1244288, 0, ...
 01251   404   NtContinue  (1244288, 0, ...
 01252   404   NtContinue  (1244288, 0, ...
 01253   404   NtContinue  (1244288, 0, ...
 01254   404   NtContinue  (1244288, 0, ...
 01255   404   NtContinue  (1244288, 0, ...
 01256   404   NtContinue  (1244288, 0, ...
 01257   404   NtContinue  (1244288, 0, ...
 01258   404   NtContinue  (1244288, 0, ...
 01259   404   NtContinue  (1244288, 0, ...
 01260   404   NtContinue  (1244288, 0, ...
 01261   404   NtContinue  (1244288, 0, ...
 01262   404   NtContinue  (1244288, 0, ...
 01263   404   NtContinue  (1244288, 0, ...
 01264   404   NtContinue  (1244288, 0, ...
 01265   404   NtContinue  (1244288, 0, ...
 01266   404   NtContinue  (1244288, 0, ...
 01267   404   NtContinue  (1244288, 0, ...
 01268   404   NtContinue  (1244288, 0, ...
 01269   404   NtContinue  (1244288, 0, ...
 01270   404   NtContinue  (1244288, 0, ...
 01271   404   NtContinue  (1244288, 0, ...
 01272   404   NtContinue  (1244288, 0, ...
 01273   404   NtContinue  (1244288, 0, ...
 01274   404   NtContinue  (1244288, 0, ...
 01275   404   NtContinue  (1244288, 0, ...
 01276   404   NtContinue  (1244288, 0, ...
 01277   404   NtContinue  (1244288, 0, ...
 01278   404   NtContinue  (1244288, 0, ...
 01279   404   NtContinue  (1244288, 0, ...
 01280   404   NtContinue  (1244288, 0, ...
 01281   404   NtContinue  (1244288, 0, ...
 01282   404   NtContinue  (1244288, 0, ...
 01283   404   NtContinue  (1244288, 0, ...
 01284   404   NtContinue  (1244288, 0, ...
 01285   404   NtContinue  (1244288, 0, ...
 01286   404   NtContinue  (1244288, 0, ...
 01287   404   NtContinue  (1244288, 0, ...
 01288   404   NtContinue  (1244288, 0, ...
 01289   404   NtContinue  (1244288, 0, ...
 01290   404   NtContinue  (1244288, 0, ...
 01291   404   NtContinue  (1244288, 0, ...
 01292   404   NtContinue  (1244288, 0, ...
 01293   404   NtContinue  (1244288, 0, ...
 01294   404   NtContinue  (1244288, 0, ...
 01295   404   NtContinue  (1244288, 0, ...
 01296   404   NtContinue  (1244288, 0, ...
 01297   404   NtContinue  (1244288, 0, ...
 01298   404   NtContinue  (1244288, 0, ...
 01299   404   NtContinue  (1244288, 0, ...
 01300   404   NtContinue  (1244288, 0, ...
 01301   404   NtContinue  (1244288, 0, ...
 01302   404   NtContinue  (1244288, 0, ...
 01303   404   NtContinue  (1244288, 0, ...
 01304   404   NtContinue  (1244288, 0, ...
 01305   404   NtContinue  (1244288, 0, ...
 01306   404   NtContinue  (1244288, 0, ...
 01307   404   NtContinue  (1244288, 0, ...
 01308   404   NtContinue  (1244288, 0, ...
 01309   404   NtContinue  (1244288, 0, ...
 01310   404   NtContinue  (1244288, 0, ...
 01311   404   NtContinue  (1244288, 0, ...
 01312   404   NtContinue  (1244288, 0, ...
 01313   404   NtContinue  (1244288, 0, ...
 01314   404   NtContinue  (1244288, 0, ...
 01315   404   NtContinue  (1244288, 0, ...
 01316   404   NtContinue  (1244288, 0, ...
 01317   404   NtContinue  (1244288, 0, ...
 01318   404   NtContinue  (1244288, 0, ...
 01319   404   NtContinue  (1244288, 0, ...
 01320   404   NtContinue  (1244288, 0, ...
 01321   404   NtContinue  (1244288, 0, ...
 01322   404   NtContinue  (1244288, 0, ...
 01323   404   NtContinue  (1244288, 0, ...
 01324   404   NtContinue  (1244288, 0, ...
 01325   404   NtContinue  (1244288, 0, ...
 01326   404   NtContinue  (1244288, 0, ...
 01327   404   NtContinue  (1244288, 0, ...
 01328   404   NtContinue  (1244288, 0, ...
 01329   404   NtContinue  (1244288, 0, ...
 01330   404   NtContinue  (1244288, 0, ...
 01331   404   NtContinue  (1244288, 0, ...
 01332   404   NtContinue  (1244288, 0, ...
 01333   404   NtContinue  (1244288, 0, ...
 01334   404   NtContinue  (1244288, 0, ...
 01335   404   NtContinue  (1244288, 0, ...
 01336   404   NtContinue  (1244288, 0, ...
 01337   404   NtContinue  (1244288, 0, ...
 01338   404   NtContinue  (1244288, 0, ...
 01339   404   NtContinue  (1244288, 0, ...
 01340   404   NtContinue  (1244288, 0, ...
 01341   404   NtContinue  (1244288, 0, ...
 01342   404   NtContinue  (1244288, 0, ...
 01343   404   NtContinue  (1244288, 0, ...
 01344   404   NtContinue  (1244288, 0, ...
 01345   404   NtContinue  (1244288, 0, ...
 01346   404   NtContinue  (1244288, 0, ...
 01347   404   NtContinue  (1244288, 0, ...
 01348   404   NtContinue  (1244288, 0, ...
 01349   404   NtContinue  (1244288, 0, ...
 01350   404   NtContinue  (1244288, 0, ...
 01351   404   NtContinue  (1244288, 0, ...
 01352   404   NtContinue  (1244288, 0, ...
 01353   404   NtContinue  (1244288, 0, ...
 01354   404   NtContinue  (1244288, 0, ...
 01355   404   NtContinue  (1244288, 0, ...
 01356   404   NtContinue  (1244288, 0, ...
 01357   404   NtContinue  (1244288, 0, ...
 01358   404   NtContinue  (1244288, 0, ...
 01359   404   NtContinue  (1244288, 0, ...
 01360   404   NtContinue  (1244288, 0, ...
 01361   404   NtContinue  (1244288, 0, ...
 01362   404   NtContinue  (1244288, 0, ...
 01363   404   NtContinue  (1244288, 0, ...
 01364   404   NtContinue  (1244288, 0, ...
 01365   404   NtContinue  (1244288, 0, ...
 01366   404   NtContinue  (1244288, 0, ...
 01367   404   NtContinue  (1244288, 0, ...
 01368   404   NtContinue  (1244288, 0, ...
 01369   404   NtContinue  (1244288, 0, ...
 01370   404   NtContinue  (1244288, 0, ...
 01371   404   NtContinue  (1244288, 0, ...
 01372   404   NtContinue  (1244288, 0, ...
 01373   404   NtContinue  (1244288, 0, ...
 01374   404   NtContinue  (1244288, 0, ...
 01375   404   NtContinue  (1244288, 0, ...
 01376   404   NtContinue  (1244288, 0, ...
 01377   404   NtContinue  (1244288, 0, ...
 01378   404   NtContinue  (1244288, 0, ...
 01379   404   NtContinue  (1244288, 0, ...
 01380   404   NtContinue  (1244288, 0, ...
 01381   404   NtContinue  (1244288, 0, ...
 01382   404   NtContinue  (1244288, 0, ...
 01383   404   NtContinue  (1244288, 0, ...
 01384   404   NtContinue  (1244288, 0, ...
 01385   404   NtContinue  (1244288, 0, ...
 01386   404   NtContinue  (1244288, 0, ...
 01387   404   NtContinue  (1244288, 0, ...
 01388   404   NtContinue  (1244288, 0, ...
 01389   404   NtContinue  (1244288, 0, ...
 01390   404   NtContinue  (1244288, 0, ...
 01391   404   NtContinue  (1244288, 0, ...
 01392   404   NtContinue  (1244288, 0, ...
 01393   404   NtContinue  (1244288, 0, ...
 01394   404   NtContinue  (1244288, 0, ...
 01395   404   NtContinue  (1244288, 0, ...
 01396   404   NtContinue  (1244288, 0, ...
 01397   404   NtContinue  (1244288, 0, ...
 01398   404   NtContinue  (1244288, 0, ...
 01399   404   NtContinue  (1244288, 0, ...
 01400   404   NtContinue  (1244288, 0, ...
 01401   404   NtContinue  (1244288, 0, ...
 01402   404   NtContinue  (1244288, 0, ...
 01403   404   NtContinue  (1244288, 0, ...
 01404   404   NtContinue  (1244288, 0, ...
 01405   404   NtContinue  (1244288, 0, ...
 01406   404   NtContinue  (1244288, 0, ...
 01407   404   NtContinue  (1244288, 0, ...
 01408   404   NtContinue  (1244288, 0, ...
 01409   404   NtContinue  (1244288, 0, ...
 01410   404   NtContinue  (1244288, 0, ...
 01411   404   NtContinue  (1244288, 0, ...
 01412   404   NtContinue  (1244288, 0, ...
 01413   404   NtContinue  (1244288, 0, ...
 01414   404   NtContinue  (1244288, 0, ...
 01415   404   NtContinue  (1244288, 0, ...
 01416   404   NtContinue  (1244288, 0, ...
 01417   404   NtContinue  (1244288, 0, ...
 01418   404   NtContinue  (1244288, 0, ...
 01419   404   NtContinue  (1244288, 0, ...
 01420   404   NtContinue  (1244288, 0, ...
 01421   404   NtContinue  (1244288, 0, ...
 01422   404   NtContinue  (1244288, 0, ...
 01423   404   NtContinue  (1244288, 0, ...
 01424   404   NtContinue  (1244288, 0, ...
 01425   404   NtContinue  (1244288, 0, ...
 01426   404   NtContinue  (1244288, 0, ...
 01427   404   NtContinue  (1244288, 0, ...
 01428   404   NtContinue  (1244288, 0, ...
 01429   404   NtContinue  (1244288, 0, ...
 01430   404   NtContinue  (1244288, 0, ...
 01431   404   NtContinue  (1244288, 0, ...
 01432   404   NtContinue  (1244288, 0, ...
 01433   404   NtContinue  (1244288, 0, ...
 01434   404   NtContinue  (1244288, 0, ...
 01435   404   NtContinue  (1244288, 0, ...
 01436   404   NtContinue  (1244288, 0, ...
 01437   404   NtContinue  (1244288, 0, ...
 01438   404   NtContinue  (1244288, 0, ...
 01439   404   NtContinue  (1244288, 0, ...
 01440   404   NtContinue  (1244288, 0, ...
 01441   404   NtContinue  (1244288, 0, ...
 01442   404   NtContinue  (1244288, 0, ...
 01443   404   NtContinue  (1244288, 0, ...
 01444   404   NtContinue  (1244288, 0, ...
 01445   404   NtContinue  (1244288, 0, ...
 01446   404   NtContinue  (1244288, 0, ...
 01447   404   NtContinue  (1244288, 0, ...
 01448   404   NtContinue  (1244288, 0, ...
 01449   404   NtContinue  (1244288, 0, ...
 01450   404   NtContinue  (1244288, 0, ...
 01451   404   NtContinue  (1244288, 0, ...
 01452   404   NtContinue  (1244288, 0, ...
 01453   404   NtContinue  (1244288, 0, ...
 01454   404   NtContinue  (1244288, 0, ...
 01455   404   NtContinue  (1244288, 0, ...
 01456   404   NtContinue  (1244288, 0, ...
 01457   404   NtContinue  (1244288, 0, ...
 01458   404   NtContinue  (1244288, 0, ...
 01459   404   NtContinue  (1244288, 0, ...
 01460   404   NtContinue  (1244288, 0, ...
 01461   404   NtContinue  (1244288, 0, ...
 01462   404   NtContinue  (1244288, 0, ...
 01463   404   NtContinue  (1244288, 0, ...
 01464   404   NtContinue  (1244288, 0, ...
 01465   404   NtContinue  (1244288, 0, ...
 01466   404   NtContinue  (1244288, 0, ...
 01467   404   NtContinue  (1244288, 0, ...
 01468   404   NtContinue  (1244288, 0, ...
 01469   404   NtContinue  (1244288, 0, ...
 01470   404   NtContinue  (1244288, 0, ...
 01471   404   NtContinue  (1244288, 0, ...
 01472   404   NtContinue  (1244288, 0, ...
 01473   404   NtContinue  (1244288, 0, ...
 01474   404   NtContinue  (1244288, 0, ...
 01475   404   NtContinue  (1244288, 0, ...
 01476   404   NtContinue  (1244288, 0, ...
 01477   404   NtContinue  (1244288, 0, ...
 01478   404   NtContinue  (1244288, 0, ...
 01479   404   NtContinue  (1244288, 0, ...
 01480   404   NtContinue  (1244288, 0, ...
 01481   404   NtContinue  (1244288, 0, ...
 01482   404   NtContinue  (1244288, 0, ...
 01483   404   NtContinue  (1244288, 0, ...
 01484   404   NtContinue  (1244288, 0, ...
 01485   404   NtContinue  (1244288, 0, ...
 01486   404   NtContinue  (1244288, 0, ...
 01487   404   NtContinue  (1244288, 0, ...
 01488   404   NtContinue  (1244288, 0, ...
 01489   404   NtContinue  (1244288, 0, ...
 01490   404   NtContinue  (1244288, 0, ...
 01491   404   NtContinue  (1244288, 0, ...
 01492   404   NtContinue  (1244288, 0, ...
 01493   404   NtContinue  (1244288, 0, ...
 01494   404   NtContinue  (1244288, 0, ...
 01495   404   NtContinue  (1244288, 0, ...
 01496   404   NtContinue  (1244288, 0, ...
 01497   404   NtContinue  (1244288, 0, ...
 01498   404   NtContinue  (1244288, 0, ...
 01499   404   NtContinue  (1244288, 0, ...
 01500   404   NtContinue  (1244288, 0, ...
 01501   404   NtContinue  (1244288, 0, ...
 01502   404   NtContinue  (1244288, 0, ...
 01503   404   NtContinue  (1244288, 0, ...
 01504   404   NtContinue  (1244288, 0, ...
 01505   404   NtContinue  (1244288, 0, ...
 01506   404   NtContinue  (1244288, 0, ...
 01507   404   NtContinue  (1244288, 0, ...
 01508   404   NtContinue  (1244288, 0, ...
 01509   404   NtContinue  (1244288, 0, ...
 01510   404   NtContinue  (1244288, 0, ...
 01511   404   NtContinue  (1244288, 0, ...
 01512   404   NtContinue  (1244288, 0, ...
 01513   404   NtContinue  (1244288, 0, ...
 01514   404   NtContinue  (1244288, 0, ...
 01515   404   NtContinue  (1244288, 0, ...
 01516   404   NtContinue  (1244288, 0, ...
 01517   404   NtContinue  (1244288, 0, ...
 01518   404   NtContinue  (1244288, 0, ...
 01519   404   NtContinue  (1244288, 0, ...
 01520   404   NtContinue  (1244288, 0, ...
 01521   404   NtContinue  (1244288, 0, ...
 01522   404   NtContinue  (1244288, 0, ...
 01523   404   NtContinue  (1244288, 0, ...
 01524   404   NtContinue  (1244288, 0, ...
 01525   404   NtContinue  (1244288, 0, ...
 01526   404   NtContinue  (1244288, 0, ...
 01527   404   NtContinue  (1244288, 0, ...
 01528   404   NtContinue  (1244288, 0, ...
 01529   404   NtContinue  (1244288, 0, ...
 01530   404   NtContinue  (1244288, 0, ...
 01531   404   NtContinue  (1244288, 0, ...
 01532   404   NtContinue  (1244288, 0, ...
 01533   404   NtContinue  (1244288, 0, ...
 01534   404   NtContinue  (1244288, 0, ...
 01535   404   NtContinue  (1244288, 0, ...
 01536   404   NtContinue  (1244288, 0, ...
 01537   404   NtContinue  (1244288, 0, ...
 01538   404   NtContinue  (1244288, 0, ...
 01539   404   NtContinue  (1244288, 0, ...
 01540   404   NtContinue  (1244288, 0, ...
 01541   404   NtContinue  (1244288, 0, ...
 01542   404   NtContinue  (1244288, 0, ...
 01543   404   NtContinue  (1244288, 0, ...
 01544   404   NtContinue  (1244288, 0, ...
 01545   404   NtContinue  (1244288, 0, ...
 01546   404   NtContinue  (1244288, 0, ...
 01547   404   NtContinue  (1244288, 0, ...
 01548   404   NtContinue  (1244288, 0, ...
 01549   404   NtContinue  (1244288, 0, ...
 01550   404   NtContinue  (1244288, 0, ...
 01551   404   NtContinue  (1244288, 0, ...
 01552   404   NtContinue  (1244288, 0, ...
 01553   404   NtContinue  (1244288, 0, ...
 01554   404   NtContinue  (1244288, 0, ...
 01555   404   NtContinue  (1244288, 0, ...
 01556   404   NtContinue  (1244288, 0, ...
 01557   404   NtContinue  (1244288, 0, ...
 01558   404   NtContinue  (1244288, 0, ...
 01559   404   NtContinue  (1244288, 0, ...
 01560   404   NtContinue  (1244288, 0, ...
 01561   404   NtContinue  (1244288, 0, ...
 01562   404   NtContinue  (1244288, 0, ...
 01563   404   NtContinue  (1244288, 0, ...
 01564   404   NtContinue  (1244288, 0, ...
 01565   404   NtContinue  (1244288, 0, ...
 01566   404   NtContinue  (1244288, 0, ...
 01567   404   NtContinue  (1244288, 0, ...
 01568   404   NtContinue  (1244288, 0, ...
 01569   404   NtContinue  (1244288, 0, ...
 01570   404   NtContinue  (1244288, 0, ...
 01571   404   NtContinue  (1244288, 0, ...
 01572   404   NtContinue  (1244288, 0, ...
 01573   404   NtContinue  (1244288, 0, ...
 01574   404   NtContinue  (1244288, 0, ...
 01575   404   NtContinue  (1244288, 0, ...
 01576   404   NtContinue  (1244288, 0, ...
 01577   404   NtContinue  (1244288, 0, ...
 01578   404   NtContinue  (1244288, 0, ...
 01579   404   NtContinue  (1244288, 0, ...
 01580   404   NtContinue  (1244288, 0, ...
 01581   404   NtContinue  (1244288, 0, ...
 01582   404   NtContinue  (1244288, 0, ...
 01583   404   NtContinue  (1244288, 0, ...
 01584   404   NtContinue  (1244288, 0, ...
 01585   404   NtContinue  (1244288, 0, ...
 01586   404   NtContinue  (1244288, 0, ...
 01587   404   NtContinue  (1244288, 0, ...
 01588   404   NtContinue  (1244288, 0, ...
 01589   404   NtContinue  (1244288, 0, ...
 01590   404   NtContinue  (1244288, 0, ...
 01591   404   NtContinue  (1244288, 0, ...
 01592   404   NtContinue  (1244288, 0, ...
 01593   404   NtContinue  (1244288, 0, ...
 01594   404   NtContinue  (1244288, 0, ...
 01595   404   NtContinue  (1244288, 0, ...
 01596   404   NtContinue  (1244288, 0, ...
 01597   404   NtContinue  (1244288, 0, ...
 01598   404   NtContinue  (1244288, 0, ...
 01599   404   NtContinue  (1244288, 0, ...
 01600   404   NtContinue  (1244288, 0, ...
 01601   404   NtContinue  (1244288, 0, ...
 01602   404   NtContinue  (1244288, 0, ...
 01603   404   NtContinue  (1244288, 0, ...
 01604   404   NtContinue  (1244288, 0, ...
 01605   404   NtContinue  (1244288, 0, ...
 01606   404   NtContinue  (1244288, 0, ...
 01607   404   NtContinue  (1244288, 0, ...
 01608   404   NtContinue  (1244288, 0, ...
 01609   404   NtContinue  (1244288, 0, ...
 01610   404   NtContinue  (1244288, 0, ...
 01611   404   NtContinue  (1244288, 0, ...
 01612   404   NtContinue  (1244288, 0, ...
 01613   404   NtContinue  (1244288, 0, ...
 01614   404   NtContinue  (1244288, 0, ...
 01615   404   NtContinue  (1244288, 0, ...
 01616   404   NtContinue  (1244288, 0, ...
 01617   404   NtContinue  (1244288, 0, ...
 01618   404   NtContinue  (1244288, 0, ...
 01619   404   NtContinue  (1244288, 0, ...
 01620   404   NtContinue  (1244288, 0, ...
 01621   404   NtContinue  (1244288, 0, ...
 01622   404   NtContinue  (1244288, 0, ...
 01623   404   NtContinue  (1244288, 0, ...
 01624   404   NtContinue  (1244288, 0, ...
 01625   404   NtContinue  (1244288, 0, ...
 01626   404   NtContinue  (1244288, 0, ...
 01627   404   NtContinue  (1244288, 0, ...
 01628   404   NtContinue  (1244288, 0, ...
 01629   404   NtContinue  (1244288, 0, ...
 01630   404   NtContinue  (1244288, 0, ...
 01631   404   NtContinue  (1244288, 0, ...
 01632   404   NtContinue  (1244288, 0, ...
 01633   404   NtContinue  (1244288, 0, ...
 01634   404   NtContinue  (1244288, 0, ...
 01635   404   NtContinue  (1244288, 0, ...
 01636   404   NtContinue  (1244288, 0, ...
 01637   404   NtContinue  (1244288, 0, ...
 01638   404   NtContinue  (1244288, 0, ...
 01639   404   NtContinue  (1244288, 0, ...
 01640   404   NtContinue  (1244288, 0, ...
 01641   404   NtContinue  (1244288, 0, ...
 01642   404   NtContinue  (1244288, 0, ...
 01643   404   NtContinue  (1244288, 0, ...
 01644   404   NtContinue  (1244288, 0, ...
 01645   404   NtContinue  (1244288, 0, ...
 01646   404   NtContinue  (1244288, 0, ...
 01647   404   NtContinue  (1244288, 0, ...
 01648   404   NtContinue  (1244288, 0, ...
 01649   404   NtContinue  (1244288, 0, ...
 01650   404   NtContinue  (1244288, 0, ...
 01651   404   NtContinue  (1244288, 0, ...
 01652   404   NtContinue  (1244288, 0, ...
 01653   404   NtContinue  (1244288, 0, ...
 01654   404   NtContinue  (1244288, 0, ...
 01655   404   NtContinue  (1244288, 0, ...
 01656   404   NtContinue  (1244288, 0, ...
 01657   404   NtContinue  (1244288, 0, ...
 01658   404   NtContinue  (1244288, 0, ...
 01659   404   NtContinue  (1244288, 0, ...
 01660   404   NtContinue  (1244288, 0, ...
 01661   404   NtContinue  (1244288, 0, ...
 01662   404   NtContinue  (1244288, 0, ...
 01663   404   NtContinue  (1244288, 0, ...
 01664   404   NtContinue  (1244288, 0, ...
 01665   404   NtContinue  (1244288, 0, ...
 01666   404   NtContinue  (1244288, 0, ...
 01667   404   NtContinue  (1244288, 0, ...
 01668   404   NtContinue  (1244288, 0, ...
 01669   404   NtContinue  (1244288, 0, ...
 01670   404   NtContinue  (1244288, 0, ...
 01671   404   NtContinue  (1244288, 0, ...
 01672   404   NtContinue  (1244288, 0, ...
 01673   404   NtContinue  (1244288, 0, ...
 01674   404   NtContinue  (1244288, 0, ...
 01675   404   NtContinue  (1244288, 0, ...
 01676   404   NtContinue  (1244288, 0, ...
 01677   404   NtContinue  (1244288, 0, ...
 01678   404   NtContinue  (1244288, 0, ...
 01679   404   NtContinue  (1244288, 0, ...
 01680   404   NtContinue  (1244288, 0, ...
 01681   404   NtContinue  (1244288, 0, ...
 01682   404   NtContinue  (1244288, 0, ...
 01683   404   NtContinue  (1244288, 0, ...
 01684   404   NtContinue  (1244288, 0, ...
 01685   404   NtContinue  (1244288, 0, ...
 01686   404   NtContinue  (1244288, 0, ...
 01687   404   NtContinue  (1244288, 0, ...
 01688   404   NtContinue  (1244288, 0, ...
 01689   404   NtContinue  (1244288, 0, ...
 01690   404   NtContinue  (1244288, 0, ...
 01691   404   NtContinue  (1244288, 0, ...
 01692   404   NtContinue  (1244288, 0, ...
 01693   404   NtContinue  (1244288, 0, ...
 01694   404   NtContinue  (1244288, 0, ...
 01695   404   NtContinue  (1244288, 0, ...
 01696   404   NtContinue  (1244288, 0, ...
 01697   404   NtContinue  (1244288, 0, ...
 01698   404   NtContinue  (1244288, 0, ...
 01699   404   NtContinue  (1244288, 0, ...
 01700   404   NtContinue  (1244288, 0, ...
 01701   404   NtContinue  (1244288, 0, ...
 01702   404   NtContinue  (1244288, 0, ...
 01703   404   NtContinue  (1244288, 0, ...
 01704   404   NtContinue  (1244288, 0, ...
 01705   404   NtContinue  (1244288, 0, ...
 01706   404   NtContinue  (1244288, 0, ...
 01707   404   NtContinue  (1244288, 0, ...
 01708   404   NtContinue  (1244288, 0, ...
 01709   404   NtContinue  (1244288, 0, ...
 01710   404   NtContinue  (1244288, 0, ...
 01711   404   NtContinue  (1244288, 0, ...
 01712   404   NtContinue  (1244288, 0, ...
 01713   404   NtContinue  (1244288, 0, ...
 01714   404   NtContinue  (1244288, 0, ...
 01715   404   NtContinue  (1244288, 0, ...
 01716   404   NtContinue  (1244288, 0, ...
 01717   404   NtContinue  (1244288, 0, ...
 01718   404   NtContinue  (1244288, 0, ...
 01719   404   NtContinue  (1244288, 0, ...
 01720   404   NtContinue  (1244288, 0, ...
 01721   404   NtContinue  (1244288, 0, ...
 01722   404   NtContinue  (1244288, 0, ...
 01723   404   NtContinue  (1244288, 0, ...
 01724   404   NtContinue  (1244288, 0, ...
 01725   404   NtContinue  (1244288, 0, ...
 01726   404   NtContinue  (1244288, 0, ...
 01727   404   NtContinue  (1244288, 0, ...
 01728   404   NtContinue  (1244288, 0, ...
 01729   404   NtContinue  (1244288, 0, ...
 01730   404   NtContinue  (1244288, 0, ...
 01731   404   NtContinue  (1244288, 0, ...
 01732   404   NtContinue  (1244288, 0, ...
 01733   404   NtContinue  (1244288, 0, ...
 01734   404   NtContinue  (1244288, 0, ...
 01735   404   NtContinue  (1244288, 0, ...
 01736   404   NtContinue  (1244288, 0, ...
 01737   404   NtContinue  (1244288, 0, ...
 01738   404   NtContinue  (1244288, 0, ...
 01739   404   NtContinue  (1244288, 0, ...
 01740   404   NtContinue  (1244288, 0, ...
 01741   404   NtContinue  (1244288, 0, ...
 01742   404   NtContinue  (1244288, 0, ...
 01743   404   NtContinue  (1244288, 0, ...
 01744   404   NtContinue  (1244288, 0, ...
 01745   404   NtContinue  (1244288, 0, ...
 01746   404   NtContinue  (1244288, 0, ...
 01747   404   NtContinue  (1244288, 0, ...
 01748   404   NtContinue  (1244288, 0, ...
 01749   404   NtContinue  (1244288, 0, ...
 01750   404   NtContinue  (1244288, 0, ...
 01751   404   NtContinue  (1244288, 0, ...
 01752   404   NtContinue  (1244288, 0, ...
 01753   404   NtContinue  (1244288, 0, ...
 01754   404   NtContinue  (1244288, 0, ...
 01755   404   NtContinue  (1244288, 0, ...
 01756   404   NtContinue  (1244288, 0, ...
 01757   404   NtContinue  (1244288, 0, ...
 01758   404   NtContinue  (1244288, 0, ...
 01759   404   NtContinue  (1244288, 0, ...
 01760   404   NtContinue  (1244288, 0, ...
 01761   404   NtContinue  (1244288, 0, ...
 01762   404   NtContinue  (1244288, 0, ...
 01763   404   NtContinue  (1244288, 0, ...
 01764   404   NtContinue  (1244288, 0, ...
 01765   404   NtContinue  (1244288, 0, ...
 01766   404   NtContinue  (1244288, 0, ...
 01767   404   NtContinue  (1244288, 0, ...
 01768   404   NtContinue  (1244288, 0, ...
 01769   404   NtContinue  (1244288, 0, ...
 01770   404   NtContinue  (1244288, 0, ...
 01771   404   NtContinue  (1244288, 0, ...
 01772   404   NtContinue  (1244288, 0, ...
 01773   404   NtContinue  (1244288, 0, ...
 01774   404   NtContinue  (1244288, 0, ...
 01775   404   NtContinue  (1244288, 0, ...
 01776   404   NtContinue  (1244288, 0, ...
 01777   404   NtContinue  (1244288, 0, ...
 01778   404   NtContinue  (1244288, 0, ...
 01779   404   NtContinue  (1244288, 0, ...
 01780   404   NtContinue  (1244288, 0, ...
 01781   404   NtContinue  (1244288, 0, ...
 01782   404   NtContinue  (1244288, 0, ...
 01783   404   NtContinue  (1244288, 0, ...
 01784   404   NtContinue  (1244288, 0, ...
 01785   404   NtContinue  (1244288, 0, ...
 01786   404   NtContinue  (1244288, 0, ...
 01787   404   NtContinue  (1244288, 0, ...
 01788   404   NtContinue  (1244288, 0, ...
 01789   404   NtContinue  (1244288, 0, ...
 01790   404   NtContinue  (1244288, 0, ...
 01791   404   NtContinue  (1244288, 0, ...
 01792   404   NtContinue  (1244288, 0, ...
 01793   404   NtContinue  (1244288, 0, ...
 01794   404   NtContinue  (1244288, 0, ...
 01795   404   NtContinue  (1244288, 0, ...
 01796   404   NtContinue  (1244288, 0, ...
 01797   404   NtContinue  (1244288, 0, ...
 01798   404   NtContinue  (1244288, 0, ...
 01799   404   NtContinue  (1244288, 0, ...
 01800   404   NtContinue  (1244288, 0, ...
 01801   404   NtContinue  (1244288, 0, ...
 01802   404   NtContinue  (1244288, 0, ...
 01803   404   NtContinue  (1244288, 0, ...
 01804   404   NtContinue  (1244288, 0, ...
 01805   404   NtContinue  (1244288, 0, ...
 01806   404   NtContinue  (1244288, 0, ...
 01807   404   NtContinue  (1244288, 0, ...
 01808   404   NtContinue  (1244288, 0, ...
 01809   404   NtContinue  (1244288, 0, ...
 01810   404   NtContinue  (1244288, 0, ...
 01811   404   NtContinue  (1244288, 0, ...
 01812   404   NtContinue  (1244288, 0, ...
 01813   404   NtContinue  (1244288, 0, ...
 01814   404   NtContinue  (1244288, 0, ...
 01815   404   NtContinue  (1244288, 0, ...
 01816   404   NtContinue  (1244288, 0, ...
 01817   404   NtContinue  (1244288, 0, ...
 01818   404   NtContinue  (1244288, 0, ...
 01819   404   NtContinue  (1244288, 0, ...
 01820   404   NtContinue  (1244288, 0, ...
 01821   404   NtContinue  (1244288, 0, ...
 01822   404   NtContinue  (1244288, 0, ...
 01823   404   NtContinue  (1244288, 0, ...
 01824   404   NtContinue  (1244288, 0, ...
 01825   404   NtContinue  (1244288, 0, ...
 01826   404   NtContinue  (1244288, 0, ...
 01827   404   NtContinue  (1244288, 0, ...
 01828   404   NtContinue  (1244288, 0, ...
 01829   404   NtContinue  (1244288, 0, ...
 01830   404   NtContinue  (1244288, 0, ...
 01831   404   NtContinue  (1244288, 0, ...
 01832   404   NtContinue  (1244288, 0, ...
 01833   404   NtContinue  (1244288, 0, ...
 01834   404   NtContinue  (1244288, 0, ...
 01835   404   NtContinue  (1244288, 0, ...
 01836   404   NtContinue  (1244288, 0, ...
 01837   404   NtContinue  (1244288, 0, ...
 01838   404   NtContinue  (1244288, 0, ...
 01839   404   NtContinue  (1244288, 0, ...
 01840   404   NtContinue  (1244288, 0, ...
 01841   404   NtContinue  (1244288, 0, ...
 01842   404   NtContinue  (1244288, 0, ...
 01843   404   NtContinue  (1244288, 0, ...
 01844   404   NtContinue  (1244288, 0, ...
 01845   404   NtContinue  (1244288, 0, ...
 01846   404   NtContinue  (1244288, 0, ...
 01847   404   NtContinue  (1244288, 0, ...
 01848   404   NtContinue  (1244288, 0, ...
 01849   404   NtContinue  (1244288, 0, ...
 01850   404   NtContinue  (1244288, 0, ...
 01851   404   NtContinue  (1244288, 0, ...
 01852   404   NtContinue  (1244288, 0, ...
 01853   404   NtContinue  (1244288, 0, ...
 01854   404   NtContinue  (1244288, 0, ...
 01855   404   NtContinue  (1244288, 0, ...
 01856   404   NtContinue  (1244288, 0, ...
 01857   404   NtContinue  (1244288, 0, ...
 01858   404   NtContinue  (1244288, 0, ...
 01859   404   NtContinue  (1244288, 0, ...
 01860   404   NtContinue  (1244288, 0, ...
 01861   404   NtContinue  (1244288, 0, ...
 01862   404   NtContinue  (1244288, 0, ...
 01863   404   NtContinue  (1244288, 0, ...
 01864   404   NtContinue  (1244288, 0, ...
 01865   404   NtContinue  (1244288, 0, ...
 01866   404   NtContinue  (1244288, 0, ...
 01867   404   NtContinue  (1244288, 0, ...
 01868   404   NtContinue  (1244288, 0, ...
 01869   404   NtContinue  (1244288, 0, ...
 01870   404   NtContinue  (1244288, 0, ...
 01871   404   NtContinue  (1244288, 0, ...
 01872   404   NtContinue  (1244288, 0, ...
 01873   404   NtContinue  (1244288, 0, ...
 01874   404   NtContinue  (1244288, 0, ...
 01875   404   NtContinue  (1244288, 0, ...
 01876   404   NtContinue  (1244288, 0, ...
 01877   404   NtContinue  (1244288, 0, ...
 01878   404   NtContinue  (1244288, 0, ...
 01879   404   NtContinue  (1244288, 0, ...
 01880   404   NtContinue  (1244288, 0, ...
 01881   404   NtContinue  (1244288, 0, ...
 01882   404   NtContinue  (1244288, 0, ...
 01883   404   NtContinue  (1244288, 0, ...
 01884   404   NtContinue  (1244288, 0, ...
 01885   404   NtContinue  (1244288, 0, ...
 01886   404   NtContinue  (1244288, 0, ...
 01887   404   NtContinue  (1244288, 0, ...
 01888   404   NtContinue  (1244288, 0, ...
 01889   404   NtContinue  (1244288, 0, ...
 01890   404   NtContinue  (1244288, 0, ...
 01891   404   NtContinue  (1244288, 0, ...
 01892   404   NtContinue  (1244288, 0, ...
 01893   404   NtContinue  (1244288, 0, ...
 01894   404   NtContinue  (1244288, 0, ...
 01895   404   NtContinue  (1244288, 0, ...
 01896   404   NtContinue  (1244288, 0, ...
 01897   404   NtContinue  (1244288, 0, ...
 01898   404   NtContinue  (1244288, 0, ...
 01899   404   NtContinue  (1244288, 0, ...
 01900   404   NtContinue  (1244288, 0, ...
 01901   404   NtContinue  (1244288, 0, ...
 01902   404   NtContinue  (1244288, 0, ...
 01903   404   NtContinue  (1244288, 0, ...
 01904   404   NtContinue  (1244288, 0, ...
 01905   404   NtContinue  (1244288, 0, ...
 01906   404   NtContinue  (1244288, 0, ...
 01907   404   NtContinue  (1244288, 0, ...
 01908   404   NtContinue  (1244288, 0, ...
 01909   404   NtContinue  (1244288, 0, ...
 01910   404   NtContinue  (1244288, 0, ...
 01911   404   NtContinue  (1244288, 0, ...
 01912   404   NtContinue  (1244288, 0, ...
 01913   404   NtContinue  (1244288, 0, ...
 01914   404   NtContinue  (1244288, 0, ...
 01915   404   NtContinue  (1244288, 0, ...
 01916   404   NtContinue  (1244288, 0, ...
 01917   404   NtContinue  (1244288, 0, ...
 01918   404   NtContinue  (1244288, 0, ...
 01919   404   NtContinue  (1244288, 0, ...
 01920   404   NtContinue  (1244288, 0, ...
 01921   404   NtContinue  (1244288, 0, ...
 01922   404   NtContinue  (1244288, 0, ...
 01923   404   NtContinue  (1244288, 0, ...
 01924   404   NtContinue  (1244288, 0, ...
 01925   404   NtContinue  (1244288, 0, ...
 01926   404   NtContinue  (1244288, 0, ...
 01927   404   NtContinue  (1244288, 0, ...
 01928   404   NtContinue  (1244288, 0, ...
 01929   404   NtContinue  (1244288, 0, ...
 01930   404   NtContinue  (1244288, 0, ...
 01931   404   NtContinue  (1244288, 0, ...
 01932   404   NtContinue  (1244288, 0, ...
 01933   404   NtContinue  (1244288, 0, ...
 01934   404   NtContinue  (1244288, 0, ...
 01935   404   NtContinue  (1244288, 0, ...
 01936   404   NtContinue  (1244288, 0, ...
 01937   404   NtContinue  (1244288, 0, ...
 01938   404   NtContinue  (1244288, 0, ...
 01939   404   NtContinue  (1244288, 0, ...
 01940   404   NtContinue  (1244288, 0, ...
 01941   404   NtContinue  (1244288, 0, ...
 01942   404   NtContinue  (1244288, 0, ...
 01943   404   NtContinue  (1244288, 0, ...
 01944   404   NtContinue  (1244288, 0, ...
 01945   404   NtContinue  (1244288, 0, ...
 01946   404   NtContinue  (1244288, 0, ...
 01947   404   NtContinue  (1244288, 0, ...
 01948   404   NtContinue  (1244288, 0, ...
 01949   404   NtContinue  (1244288, 0, ...
 01950   404   NtContinue  (1244288, 0, ...
 01951   404   NtContinue  (1244288, 0, ...
 01952   404   NtContinue  (1244288, 0, ...
 01953   404   NtContinue  (1244288, 0, ...
 01954   404   NtContinue  (1244288, 0, ...
 01955   404   NtContinue  (1244288, 0, ...
 01956   404   NtContinue  (1244288, 0, ...
 01957   404   NtContinue  (1244288, 0, ...
 01958   404   NtContinue  (1244288, 0, ...
 01959   404   NtContinue  (1244288, 0, ...
 01960   404   NtContinue  (1244288, 0, ...
 01961   404   NtContinue  (1244288, 0, ...
 01962   404   NtContinue  (1244288, 0, ...
 01963   404   NtContinue  (1244288, 0, ...
 01964   404   NtContinue  (1244288, 0, ...
 01965   404   NtContinue  (1244288, 0, ...
 01966   404   NtContinue  (1244288, 0, ...
 01967   404   NtContinue  (1244288, 0, ...
 01968   404   NtContinue  (1244288, 0, ...
 01969   404   NtContinue  (1244288, 0, ...
 01970   404   NtContinue  (1244288, 0, ...
 01971   404   NtContinue  (1244288, 0, ...
 01972   404   NtContinue  (1244288, 0, ...
 01973   404   NtContinue  (1244288, 0, ...
 01974   404   NtContinue  (1244288, 0, ...
 01975   404   NtContinue  (1244288, 0, ...
 01976   404   NtContinue  (1244288, 0, ...
 01977   404   NtContinue  (1244288, 0, ...
 01978   404   NtContinue  (1244288, 0, ...
 01979   404   NtContinue  (1244288, 0, ...
 01980   404   NtContinue  (1244288, 0, ...
 01981   404   NtContinue  (1244288, 0, ...
 01982   404   NtContinue  (1244288, 0, ...
 01983   404   NtContinue  (1244288, 0, ...
 01984   404   NtContinue  (1244288, 0, ...
 01985   404   NtContinue  (1244288, 0, ...
 01986   404   NtContinue  (1244288, 0, ...
 01987   404   NtContinue  (1244288, 0, ...
 01988   404   NtContinue  (1244288, 0, ...
 01989   404   NtContinue  (1244288, 0, ...
 01990   404   NtContinue  (1244288, 0, ...
 01991   404   NtContinue  (1244288, 0, ...
 01992   404   NtContinue  (1244288, 0, ...
 01993   404   NtContinue  (1244288, 0, ...
 01994   404   NtContinue  (1244288, 0, ...
 01995   404   NtContinue  (1244288, 0, ...
 01996   404   NtContinue  (1244288, 0, ...
 01997   404   NtContinue  (1244288, 0, ...
 01998   404   NtContinue  (1244288, 0, ...
 01999   404   NtContinue  (1244288, 0, ...
 02000   404   NtContinue  (1244288, 0, ...
 02001   404   NtContinue  (1244288, 0, ...
 02002   404   NtContinue  (1244288, 0, ...
 02003   404   NtContinue  (1244288, 0, ...
 02004   404   NtContinue  (1244288, 0, ...
 02005   404   NtContinue  (1244288, 0, ...
 02006   404   NtContinue  (1244288, 0, ...
 02007   404   NtContinue  (1244288, 0, ...
 02008   404   NtContinue  (1244288, 0, ...
 02009   404   NtContinue  (1244288, 0, ...
 02010   404   NtContinue  (1244288, 0, ...
 02011   404   NtContinue  (1244288, 0, ...
 02012   404   NtContinue  (1244288, 0, ...
 02013   404   NtContinue  (1244288, 0, ...
 02014   404   NtContinue  (1244288, 0, ...
 02015   404   NtContinue  (1244288, 0, ...
 02016   404   NtContinue  (1244288, 0, ...
 02017   404   NtContinue  (1244288, 0, ...
 02018   404   NtContinue  (1244288, 0, ...
 02019   404   NtContinue  (1244288, 0, ...
 02020   404   NtContinue  (1244288, 0, ...
 02021   404   NtContinue  (1244288, 0, ...
 02022   404   NtContinue  (1244288, 0, ...
 02023   404   NtContinue  (1244288, 0, ...
 02024   404   NtContinue  (1244288, 0, ...
 02025   404   NtContinue  (1244288, 0, ...
 02026   404   NtContinue  (1244288, 0, ...
 02027   404   NtContinue  (1244288, 0, ...
 02028   404   NtContinue  (1244288, 0, ...
 02029   404   NtContinue  (1244288, 0, ...
 02030   404   NtContinue  (1244288, 0, ...
 02031   404   NtContinue  (1244288, 0, ...
 02032   404   NtContinue  (1244288, 0, ...
 02033   404   NtContinue  (1244288, 0, ...
 02034   404   NtContinue  (1244288, 0, ...
 02035   404   NtContinue  (1244288, 0, ...
 02036   404   NtContinue  (1244288, 0, ...
 02037   404   NtContinue  (1244288, 0, ...
 02038   404   NtContinue  (1244288, 0, ...
 02039   404   NtContinue  (1244288, 0, ...
 02040   404   NtContinue  (1244288, 0, ...
 02041   404   NtContinue  (1244288, 0, ...
 02042   404   NtContinue  (1244288, 0, ...
 02043   404   NtContinue  (1244288, 0, ...
 02044   404   NtContinue  (1244288, 0, ...
 02045   404   NtContinue  (1244288, 0, ...
 02046   404   NtContinue  (1244288, 0, ...
 02047   404   NtContinue  (1244288, 0, ...
 02048   404   NtContinue  (1244288, 0, ...
 02049   404   NtContinue  (1244288, 0, ...
 02050   404   NtContinue  (1244288, 0, ...
 02051   404   NtContinue  (1244288, 0, ...
 02052   404   NtContinue  (1244288, 0, ...
 02053   404   NtContinue  (1244288, 0, ...
 02054   404   NtContinue  (1244288, 0, ...
 02055   404   NtContinue  (1244288, 0, ...
 02056   404   NtContinue  (1244288, 0, ...
 02057   404   NtContinue  (1244288, 0, ...
 02058   404   NtContinue  (1244288, 0, ...
 02059   404   NtContinue  (1244288, 0, ...
 02060   404   NtContinue  (1244288, 0, ...
 02061   404   NtContinue  (1244288, 0, ...
 02062   404   NtContinue  (1244288, 0, ...
 02063   404   NtContinue  (1244288, 0, ...
 02064   404   NtContinue  (1244288, 0, ...
 02065   404   NtContinue  (1244288, 0, ...
 02066   404   NtContinue  (1244288, 0, ...
 02067   404   NtContinue  (1244288, 0, ...
 02068   404   NtContinue  (1244288, 0, ...
 02069   404   NtContinue  (1244288, 0, ...
 02070   404   NtContinue  (1244288, 0, ...
 02071   404   NtContinue  (1244288, 0, ...
 02072   404   NtContinue  (1244288, 0, ...
 02073   404   NtContinue  (1244288, 0, ...
 02074   404   NtContinue  (1244288, 0, ...
 02075   404   NtContinue  (1244288, 0, ...
 02076   404   NtContinue  (1244288, 0, ...
 02077   404   NtContinue  (1244288, 0, ...
 02078   404   NtContinue  (1244288, 0, ...
 02079   404   NtContinue  (1244288, 0, ...
 02080   404   NtContinue  (1244288, 0, ...
 02081   404   NtContinue  (1244288, 0, ...
 02082   404   NtContinue  (1244288, 0, ...
 02083   404   NtContinue  (1244288, 0, ...
 02084   404   NtContinue  (1244288, 0, ...
 02085   404   NtContinue  (1244288, 0, ...
 02086   404   NtContinue  (1244288, 0, ...
 02087   404   NtContinue  (1244288, 0, ...
 02088   404   NtContinue  (1244288, 0, ...
 02089   404   NtContinue  (1244288, 0, ...
 02090   404   NtContinue  (1244288, 0, ...
 02091   404   NtContinue  (1244288, 0, ...
 02092   404   NtContinue  (1244288, 0, ...
 02093   404   NtContinue  (1244288, 0, ...
 02094   404   NtContinue  (1244288, 0, ...
 02095   404   NtContinue  (1244288, 0, ...
 02096   404   NtContinue  (1244288, 0, ...
 02097   404   NtContinue  (1244288, 0, ...
 02098   404   NtContinue  (1244288, 0, ...
 02099   404   NtContinue  (1244288, 0, ...
 02100   404   NtContinue  (1244288, 0, ...
 02101   404   NtContinue  (1244288, 0, ...
 02102   404   NtContinue  (1244288, 0, ...
 02103   404   NtContinue  (1244288, 0, ...
 02104   404   NtContinue  (1244288, 0, ...
 02105   404   NtContinue  (1244288, 0, ...
 02106   404   NtContinue  (1244288, 0, ...
 02107   404   NtContinue  (1244288, 0, ...
 02108   404   NtContinue  (1244288, 0, ...
 02109   404   NtContinue  (1244288, 0, ...
 02110   404   NtContinue  (1244288, 0, ...
 02111   404   NtContinue  (1244288, 0, ...
 02112   404   NtContinue  (1244288, 0, ...
 02113   404   NtContinue  (1244288, 0, ...
 02114   404   NtContinue  (1244288, 0, ...
 02115   404   NtContinue  (1244288, 0, ...
 02116   404   NtContinue  (1244288, 0, ...
 02117   404   NtContinue  (1244288, 0, ...
 02118   404   NtContinue  (1244288, 0, ...
 02119   404   NtContinue  (1244288, 0, ...
 02120   404   NtContinue  (1244288, 0, ...
 02121   404   NtContinue  (1244288, 0, ...
 02122   404   NtContinue  (1244288, 0, ...
 02123   404   NtContinue  (1244288, 0, ...
 02124   404   NtContinue  (1244288, 0, ...
 02125   404   NtContinue  (1244288, 0, ...
 02126   404   NtContinue  (1244288, 0, ...
 02127   404   NtContinue  (1244288, 0, ...
 02128   404   NtContinue  (1244288, 0, ...
 02129   404   NtContinue  (1244288, 0, ...
 02130   404   NtContinue  (1244288, 0, ...
 02131   404   NtContinue  (1244288, 0, ...
 02132   404   NtContinue  (1244288, 0, ...
 02133   404   NtContinue  (1244288, 0, ...
 02134   404   NtContinue  (1244288, 0, ...
 02135   404   NtContinue  (1244288, 0, ...
 02136   404   NtContinue  (1244288, 0, ...
 02137   404   NtContinue  (1244288, 0, ...
 02138   404   NtContinue  (1244288, 0, ...
 02139   404   NtContinue  (1244288, 0, ...
 02140   404   NtContinue  (1244288, 0, ...
 02141   404   NtContinue  (1244288, 0, ...
 02142   404   NtContinue  (1244288, 0, ...
 02143   404   NtContinue  (1244288, 0, ...
 02144   404   NtContinue  (1244288, 0, ...
 02145   404   NtContinue  (1244288, 0, ...
 02146   404   NtContinue  (1244288, 0, ...
 02147   404   NtContinue  (1244288, 0, ...
 02148   404   NtContinue  (1244288, 0, ...
 02149   404   NtContinue  (1244288, 0, ...
 02150   404   NtContinue  (1244288, 0, ...
 02151   404   NtContinue  (1244288, 0, ...
 02152   404   NtContinue  (1244288, 0, ...
 02153   404   NtContinue  (1244288, 0, ...
 02154   404   NtContinue  (1244288, 0, ...
 02155   404   NtContinue  (1244288, 0, ...
 02156   404   NtContinue  (1244288, 0, ...
 02157   404   NtContinue  (1244288, 0, ...
 02158   404   NtContinue  (1244288, 0, ...
 02159   404   NtContinue  (1244288, 0, ...
 02160   404   NtContinue  (1244288, 0, ...
 02161   404   NtContinue  (1244288, 0, ...
 02162   404   NtContinue  (1244288, 0, ...
 02163   404   NtContinue  (1244288, 0, ...
 02164   404   NtContinue  (1244288, 0, ...
 02165   404   NtContinue  (1244288, 0, ...
 02166   404   NtContinue  (1244288, 0, ...
 02167   404   NtContinue  (1244288, 0, ...
 02168   404   NtContinue  (1244288, 0, ...
 02169   404   NtContinue  (1244288, 0, ...
 02170   404   NtContinue  (1244288, 0, ...
 02171   404   NtContinue  (1244288, 0, ...
 02172   404   NtContinue  (1244288, 0, ...
 02173   404   NtContinue  (1244288, 0, ...
 02174   404   NtContinue  (1244288, 0, ...
 02175   404   NtContinue  (1244288, 0, ...
 02176   404   NtContinue  (1244288, 0, ...
 02177   404   NtContinue  (1244288, 0, ...
 02178   404   NtContinue  (1244288, 0, ...
 02179   404   NtContinue  (1244288, 0, ...
 02180   404   NtContinue  (1244288, 0, ...
 02181   404   NtContinue  (1244288, 0, ...
 02182   404   NtContinue  (1244288, 0, ...
 02183   404   NtContinue  (1244288, 0, ...
 02184   404   NtContinue  (1244288, 0, ...
 02185   404   NtContinue  (1244288, 0, ...
 02186   404   NtContinue  (1244288, 0, ...
 02187   404   NtContinue  (1244288, 0, ...
 02188   404   NtContinue  (1244288, 0, ...
 02189   404   NtContinue  (1244288, 0, ...
 02190   404   NtContinue  (1244288, 0, ...
 02191   404   NtContinue  (1244288, 0, ...
 02192   404   NtContinue  (1244288, 0, ...
 02193   404   NtContinue  (1244288, 0, ...
 02194   404   NtContinue  (1244288, 0, ...
 02195   404   NtContinue  (1244288, 0, ...
 02196   404   NtContinue  (1244288, 0, ...
 02197   404   NtContinue  (1244288, 0, ...
 02198   404   NtContinue  (1244288, 0, ...
 02199   404   NtContinue  (1244288, 0, ...
 02200   404   NtContinue  (1244288, 0, ...
 02201   404   NtContinue  (1244288, 0, ...
 02202   404   NtContinue  (1244288, 0, ...
 02203   404   NtContinue  (1244288, 0, ...
 02204   404   NtContinue  (1244288, 0, ...
 02205   404   NtContinue  (1244288, 0, ...
 02206   404   NtContinue  (1244288, 0, ...
 02207   404   NtContinue  (1244288, 0, ...
 02208   404   NtContinue  (1244288, 0, ...
 02209   404   NtContinue  (1244288, 0, ...
 02210   404   NtContinue  (1244288, 0, ...
 02211   404   NtContinue  (1244288, 0, ...
 02212   404   NtContinue  (1244288, 0, ...
 02213   404   NtContinue  (1244288, 0, ...
 02214   404   NtContinue  (1244288, 0, ...
 02215   404   NtContinue  (1244288, 0, ...
 02216   404   NtContinue  (1244288, 0, ...
 02217   404   NtContinue  (1244288, 0, ...
 02218   404   NtContinue  (1244288, 0, ...
 02219   404   NtContinue  (1244288, 0, ...
 02220   404   NtContinue  (1244288, 0, ...
 02221   404   NtContinue  (1244288, 0, ...
 02222   404   NtContinue  (1244288, 0, ...
 02223   404   NtContinue  (1244288, 0, ...
 02224   404   NtContinue  (1244288, 0, ...
 02225   404   NtContinue  (1244288, 0, ...
 02226   404   NtContinue  (1244288, 0, ...
 02227   404   NtContinue  (1244288, 0, ...
 02228   404   NtContinue  (1244288, 0, ...
 02229   404   NtContinue  (1244288, 0, ...
 02230   404   NtContinue  (1244288, 0, ...
 02231   404   NtContinue  (1244288, 0, ...
 02232   404   NtContinue  (1244288, 0, ...
 02233   404   NtContinue  (1244288, 0, ...
 02234   404   NtContinue  (1244288, 0, ...
 02235   404   NtContinue  (1244288, 0, ...
 02236   404   NtContinue  (1244288, 0, ...
 02237   404   NtContinue  (1244288, 0, ...
 02238   404   NtContinue  (1244288, 0, ...
 02239   404   NtContinue  (1244288, 0, ...
 02240   404   NtContinue  (1244288, 0, ...
 02241   404   NtContinue  (1244288, 0, ...
 02242   404   NtContinue  (1244288, 0, ...
 02243   404   NtContinue  (1244288, 0, ...
 02244   404   NtContinue  (1244288, 0, ...
 02245   404   NtContinue  (1244288, 0, ...
 02246   404   NtContinue  (1244288, 0, ...
 02247   404   NtContinue  (1244288, 0, ...
 02248   404   NtContinue  (1244288, 0, ...
 02249   404   NtContinue  (1244288, 0, ...
 02250   404   NtContinue  (1244288, 0, ...
 02251   404   NtContinue  (1244288, 0, ...
 02252   404   NtContinue  (1244288, 0, ...
 02253   404   NtContinue  (1244288, 0, ...
 02254   404   NtContinue  (1244288, 0, ...
 02255   404   NtContinue  (1244288, 0, ...
 02256   404   NtContinue  (1244288, 0, ...
 02257   404   NtContinue  (1244288, 0, ...
 02258   404   NtContinue  (1244288, 0, ...
 02259   404   NtContinue  (1244288, 0, ...
 02260   404   NtContinue  (1244288, 0, ...
 02261   404   NtContinue  (1244288, 0, ...
 02262   404   NtContinue  (1244288, 0, ...
 02263   404   NtContinue  (1244288, 0, ...
 02264   404   NtContinue  (1244288, 0, ...
 02265   404   NtContinue  (1244288, 0, ...
 02266   404   NtContinue  (1244288, 0, ...
 02267   404   NtContinue  (1244288, 0, ...
 02268   404   NtContinue  (1244288, 0, ...
 02269   404   NtContinue  (1244288, 0, ...
 02270   404   NtContinue  (1244288, 0, ...
 02271   404   NtContinue  (1244288, 0, ...
 02272   404   NtContinue  (1244288, 0, ...
 02273   404   NtContinue  (1244288, 0, ...
 02274   404   NtContinue  (1244288, 0, ...
 02275   404   NtContinue  (1244288, 0, ...
 02276   404   NtContinue  (1244288, 0, ...
 02277   404   NtContinue  (1244288, 0, ...
 02278   404   NtContinue  (1244288, 0, ...
 02279   404   NtContinue  (1244288, 0, ...
 02280   404   NtContinue  (1244288, 0, ...
 02281   404   NtContinue  (1244288, 0, ...
 02282   404   NtContinue  (1244288, 0, ...
 02283   404   NtContinue  (1244288, 0, ...
 02284   404   NtContinue  (1244288, 0, ...
 02285   404   NtContinue  (1244288, 0, ...
 02286   404   NtContinue  (1244288, 0, ...
 02287   404   NtContinue  (1244288, 0, ...
 02288   404   NtContinue  (1244288, 0, ...
 02289   404   NtContinue  (1244288, 0, ...
 02290   404   NtContinue  (1244288, 0, ...
 02291   404   NtContinue  (1244288, 0, ...
 02292   404   NtContinue  (1244288, 0, ...
 02293   404   NtContinue  (1244288, 0, ...
 02294   404   NtContinue  (1244288, 0, ...
 02295   404   NtContinue  (1244288, 0, ...
 02296   404   NtContinue  (1244288, 0, ...
 02297   404   NtContinue  (1244288, 0, ...
 02298   404   NtContinue  (1244288, 0, ...
 02299   404   NtContinue  (1244288, 0, ...
 02300   404   NtContinue  (1244288, 0, ...
 02301   404   NtContinue  (1244288, 0, ...
 02302   404   NtContinue  (1244288, 0, ...
 02303   404   NtContinue  (1244288, 0, ...
 02304   404   NtContinue  (1244288, 0, ...
 02305   404   NtContinue  (1244288, 0, ...
 02306   404   NtContinue  (1244288, 0, ...
 02307   404   NtContinue  (1244288, 0, ...
 02308   404   NtContinue  (1244288, 0, ...
 02309   404   NtContinue  (1244288, 0, ...
 02310   404   NtContinue  (1244288, 0, ...
 02311   404   NtContinue  (1244288, 0, ...
 02312   404   NtContinue  (1244288, 0, ...
 02313   404   NtContinue  (1244288, 0, ...
 02314   404   NtContinue  (1244288, 0, ...
 02315   404   NtContinue  (1244288, 0, ...
 02316   404   NtContinue  (1244288, 0, ...
 02317   404   NtContinue  (1244288, 0, ...
 02318   404   NtContinue  (1244288, 0, ...
 02319   404   NtContinue  (1244288, 0, ...
 02320   404   NtContinue  (1244288, 0, ...
 02321   404   NtContinue  (1244288, 0, ...
 02322   404   NtContinue  (1244288, 0, ...
 02323   404   NtContinue  (1244288, 0, ...
 02324   404   NtContinue  (1244288, 0, ...
 02325   404   NtContinue  (1244288, 0, ...
 02326   404   NtContinue  (1244288, 0, ...
 02327   404   NtContinue  (1244288, 0, ...
 02328   404   NtContinue  (1244288, 0, ...
 02329   404   NtContinue  (1244288, 0, ...
 02330   404   NtContinue  (1244288, 0, ...
 02331   404   NtContinue  (1244288, 0, ...
 02332   404   NtContinue  (1244288, 0, ...
 02333   404   NtContinue  (1244288, 0, ...
 02334   404   NtContinue  (1244288, 0, ...
 02335   404   NtContinue  (1244288, 0, ...
 02336   404   NtContinue  (1244288, 0, ...
 02337   404   NtContinue  (1244288, 0, ...
 02338   404   NtContinue  (1244288, 0, ...
 02339   404   NtContinue  (1244288, 0, ...
 02340   404   NtContinue  (1244288, 0, ...
 02341   404   NtContinue  (1244288, 0, ...
 02342   404   NtContinue  (1244288, 0, ...
 02343   404   NtContinue  (1244288, 0, ...
 02344   404   NtContinue  (1244288, 0, ...
 02345   404   NtContinue  (1244288, 0, ...
 02346   404   NtContinue  (1244288, 0, ...
 02347   404   NtContinue  (1244288, 0, ...
 02348   404   NtContinue  (1244288, 0, ...
 02349   404   NtContinue  (1244288, 0, ...
 02350   404   NtContinue  (1244288, 0, ...
 02351   404   NtContinue  (1244288, 0, ...
 02352   404   NtContinue  (1244288, 0, ...
 02353   404   NtContinue  (1244288, 0, ...
 02354   404   NtContinue  (1244288, 0, ...
 02355   404   NtContinue  (1244288, 0, ...
 02356   404   NtContinue  (1244288, 0, ...
 02357   404   NtContinue  (1244288, 0, ...
 02358   404   NtContinue  (1244288, 0, ...
 02359   404   NtContinue  (1244288, 0, ...
 02360   404   NtContinue  (1244288, 0, ...
 02361   404   NtContinue  (1244288, 0, ...
 02362   404   NtContinue  (1244288, 0, ...
 02363   404   NtContinue  (1244288, 0, ...
 02364   404   NtContinue  (1244288, 0, ...
 02365   404   NtContinue  (1244288, 0, ...
 02366   404   NtContinue  (1244288, 0, ...
 02367   404   NtContinue  (1244288, 0, ...
 02368   404   NtContinue  (1244288, 0, ...
 02369   404   NtContinue  (1244288, 0, ...
 02370   404   NtContinue  (1244288, 0, ...
 02371   404   NtContinue  (1244288, 0, ...
 02372   404   NtContinue  (1244288, 0, ...
 02373   404   NtContinue  (1244288, 0, ...
 02374   404   NtContinue  (1244288, 0, ...
 02375   404   NtContinue  (1244288, 0, ...
 02376   404   NtContinue  (1244288, 0, ...
 02377   404   NtContinue  (1244288, 0, ...
 02378   404   NtContinue  (1244288, 0, ...
 02379   404   NtContinue  (1244288, 0, ...
 02380   404   NtContinue  (1244288, 0, ...
 02381   404   NtContinue  (1244288, 0, ...
 02382   404   NtContinue  (1244288, 0, ...
 02383   404   NtContinue  (1244288, 0, ...
 02384   404   NtContinue  (1244288, 0, ...
 02385   404   NtContinue  (1244288, 0, ...
 02386   404   NtContinue  (1244288, 0, ...
 02387   404   NtContinue  (1244288, 0, ...
 02388   404   NtContinue  (1244288, 0, ...
 02389   404   NtContinue  (1244288, 0, ...
 02390   404   NtContinue  (1244288, 0, ...
 02391   404   NtContinue  (1244288, 0, ...
 02392   404   NtContinue  (1244288, 0, ...
 02393   404   NtContinue  (1244288, 0, ...
 02394   404   NtContinue  (1244288, 0, ...
 02395   404   NtContinue  (1244288, 0, ...
 02396   404   NtContinue  (1244288, 0, ...
 02397   404   NtContinue  (1244288, 0, ...
 02398   404   NtContinue  (1244288, 0, ...
 02399   404   NtContinue  (1244288, 0, ...
 02400   404   NtContinue  (1244288, 0, ...
 02401   404   NtContinue  (1244288, 0, ...
 02402   404   NtContinue  (1244288, 0, ...
 02403   404   NtContinue  (1244288, 0, ...
 02404   404   NtContinue  (1244288, 0, ...
 02405   404   NtContinue  (1244288, 0, ...
 02406   404   NtContinue  (1244288, 0, ...
 02407   404   NtContinue  (1244288, 0, ...
 02408   404   NtContinue  (1244288, 0, ...
 02409   404   NtContinue  (1244288, 0, ...
 02410   404   NtContinue  (1244288, 0, ...
 02411   404   NtContinue  (1244288, 0, ...
 02412   404   NtContinue  (1244288, 0, ...
 02413   404   NtContinue  (1244288, 0, ...
 02414   404   NtContinue  (1244288, 0, ...
 02415   404   NtContinue  (1244288, 0, ...
 02416   404   NtContinue  (1244288, 0, ...
 02417   404   NtContinue  (1244288, 0, ...
 02418   404   NtContinue  (1244288, 0, ...
 02419   404   NtContinue  (1244288, 0, ...
 02420   404   NtContinue  (1244288, 0, ...
 02421   404   NtContinue  (1244288, 0, ...
 02422   404   NtContinue  (1244288, 0, ...
 02423   404   NtContinue  (1244288, 0, ...
 02424   404   NtContinue  (1244288, 0, ...
 02425   404   NtContinue  (1244288, 0, ...
 02426   404   NtContinue  (1244288, 0, ...
 02427   404   NtContinue  (1244288, 0, ...
 02428   404   NtContinue  (1244288, 0, ...
 02429   404   NtContinue  (1244288, 0, ...
 02430   404   NtContinue  (1244288, 0, ...
 02431   404   NtContinue  (1244288, 0, ...
 02432   404   NtContinue  (1244288, 0, ...
 02433   404   NtContinue  (1244288, 0, ...
 02434   404   NtContinue  (1244288, 0, ...
 02435   404   NtContinue  (1244288, 0, ...
 02436   404   NtContinue  (1244288, 0, ...
 02437   404   NtContinue  (1244288, 0, ...
 02438   404   NtContinue  (1244288, 0, ...
 02439   404   NtContinue  (1244288, 0, ...
 02440   404   NtContinue  (1244288, 0, ...
 02441   404   NtContinue  (1244288, 0, ...
 02442   404   NtContinue  (1244288, 0, ...
 02443   404   NtContinue  (1244288, 0, ...
 02444   404   NtContinue  (1244288, 0, ...
 02445   404   NtContinue  (1244288, 0, ...
 02446   404   NtContinue  (1244288, 0, ...
 02447   404   NtContinue  (1244288, 0, ...
 02448   404   NtContinue  (1244288, 0, ...
 02449   404   NtContinue  (1244288, 0, ...
 02450   404   NtContinue  (1244288, 0, ...
 02451   404   NtContinue  (1244288, 0, ...
 02452   404   NtContinue  (1244288, 0, ...
 02453   404   NtContinue  (1244288, 0, ...
 02454   404   NtContinue  (1244288, 0, ...
 02455   404   NtContinue  (1244288, 0, ...
 02456   404   NtContinue  (1244288, 0, ...
 02457   404   NtContinue  (1244288, 0, ...
 02458   404   NtContinue  (1244288, 0, ...
 02459   404   NtContinue  (1244288, 0, ...
 02460   404   NtContinue  (1244288, 0, ...
 02461   404   NtContinue  (1244288, 0, ...
 02462   404   NtContinue  (1244288, 0, ...
 02463   404   NtContinue  (1244288, 0, ...
 02464   404   NtContinue  (1244288, 0, ...
 02465   404   NtContinue  (1244288, 0, ...
 02466   404   NtContinue  (1244288, 0, ...
 02467   404   NtContinue  (1244288, 0, ...
 02468   404   NtContinue  (1244288, 0, ...
 02469   404   NtContinue  (1244288, 0, ...
 02470   404   NtContinue  (1244288, 0, ...
 02471   404   NtContinue  (1244288, 0, ...
 02472   404   NtContinue  (1244288, 0, ...
 02473   404   NtContinue  (1244288, 0, ...
 02474   404   NtContinue  (1244288, 0, ...
 02475   404   NtContinue  (1244288, 0, ...
 02476   404   NtContinue  (1244288, 0, ...
 02477   404   NtContinue  (1244288, 0, ...
 02478   404   NtContinue  (1244288, 0, ...
 02479   404   NtContinue  (1244288, 0, ...
 02480   404   NtContinue  (1244288, 0, ...
 02481   404   NtContinue  (1244288, 0, ...
 02482   404   NtContinue  (1244288, 0, ...
 02483   404   NtContinue  (1244288, 0, ...
 02484   404   NtContinue  (1244288, 0, ...
 02485   404   NtContinue  (1244288, 0, ...
 02486   404   NtContinue  (1244288, 0, ...
 02487   404   NtContinue  (1244288, 0, ...
 02488   404   NtContinue  (1244288, 0, ...
 02489   404   NtContinue  (1244288, 0, ...
 02490   404   NtContinue  (1244288, 0, ...
 02491   404   NtContinue  (1244288, 0, ...
 02492   404   NtContinue  (1244288, 0, ...
 02493   404   NtContinue  (1244288, 0, ...
 02494   404   NtContinue  (1244288, 0, ...
 02495   404   NtContinue  (1244288, 0, ...
 02496   404   NtContinue  (1244288, 0, ...
 02497   404   NtContinue  (1244288, 0, ...
 02498   404   NtContinue  (1244288, 0, ...
 02499   404   NtContinue  (1244288, 0, ...
 02500   404   NtContinue  (1244288, 0, ...
 02501   404   NtContinue  (1244288, 0, ...
 02502   404   NtContinue  (1244288, 0, ...
 02503   404   NtContinue  (1244288, 0, ...
 02504   404   NtContinue  (1244288, 0, ...
 02505   404   NtContinue  (1244288, 0, ...
 02506   404   NtContinue  (1244288, 0, ...
 02507   404   NtContinue  (1244288, 0, ...
 02508   404   NtContinue  (1244288, 0, ...
 02509   404   NtContinue  (1244288, 0, ...
 02510   404   NtContinue  (1244288, 0, ...
 02511   404   NtContinue  (1244288, 0, ...
 02512   404   NtContinue  (1244288, 0, ...
 02513   404   NtContinue  (1244288, 0, ...
 02514   404   NtContinue  (1244288, 0, ...
 02515   404   NtContinue  (1244288, 0, ...
 02516   404   NtContinue  (1244288, 0, ...
 02517   404   NtContinue  (1244288, 0, ...
 02518   404   NtContinue  (1244288, 0, ...
 02519   404   NtContinue  (1244288, 0, ...
 02520   404   NtContinue  (1244288, 0, ...
 02521   404   NtContinue  (1244288, 0, ...
 02522   404   NtContinue  (1244288, 0, ...
 02523   404   NtContinue  (1244288, 0, ...
 02524   404   NtContinue  (1244288, 0, ...
 02525   404   NtContinue  (1244288, 0, ...
 02526   404   NtContinue  (1244288, 0, ...
 02527   404   NtContinue  (1244288, 0, ...
 02528   404   NtContinue  (1244288, 0, ...
 02529   404   NtContinue  (1244288, 0, ...
 02530   404   NtContinue  (1244288, 0, ...
 02531   404   NtContinue  (1244288, 0, ...
 02532   404   NtContinue  (1244288, 0, ...
 02533   404   NtContinue  (1244288, 0, ...
 02534   404   NtContinue  (1244288, 0, ...
 02535   404   NtContinue  (1244288, 0, ...
 02536   404   NtContinue  (1244288, 0, ...
 02537   404   NtContinue  (1244288, 0, ...
 02538   404   NtContinue  (1244288, 0, ...
 02539   404   NtContinue  (1244288, 0, ...
 02540   404   NtContinue  (1244288, 0, ...
 02541   404   NtContinue  (1244288, 0, ...
 02542   404   NtContinue  (1244288, 0, ...
 02543   404   NtContinue  (1244288, 0, ...
 02544   404   NtContinue  (1244288, 0, ...
 02545   404   NtContinue  (1244288, 0, ...
 02546   404   NtContinue  (1244288, 0, ...
 02547   404   NtContinue  (1244288, 0, ...
 02548   404   NtContinue  (1244288, 0, ...
 02549   404   NtContinue  (1244288, 0, ...
 02550   404   NtContinue  (1244288, 0, ...
 02551   404   NtContinue  (1244288, 0, ...
 02552   404   NtContinue  (1244288, 0, ...
 02553   404   NtContinue  (1244288, 0, ...
 02554   404   NtContinue  (1244288, 0, ...
 02555   404   NtContinue  (1244288, 0, ...
 02556   404   NtContinue  (1244288, 0, ...
 02557   404   NtContinue  (1244288, 0, ...
 02558   404   NtContinue  (1244288, 0, ...
 02559   404   NtContinue  (1244288, 0, ...
 02560   404   NtContinue  (1244288, 0, ...
 02561   404   NtContinue  (1244288, 0, ...
 02562   404   NtContinue  (1244288, 0, ...
 02563   404   NtContinue  (1244288, 0, ...
 02564   404   NtContinue  (1244288, 0, ...
 02565   404   NtContinue  (1244288, 0, ...
 02566   404   NtContinue  (1244288, 0, ...
 02567   404   NtContinue  (1244288, 0, ...
 02568   404   NtContinue  (1244288, 0, ...
 02569   404   NtContinue  (1244288, 0, ...
 02570   404   NtContinue  (1244288, 0, ...
 02571   404   NtContinue  (1244288, 0, ...
 02572   404   NtContinue  (1244288, 0, ...
 02573   404   NtContinue  (1244288, 0, ...
 02574   404   NtContinue  (1244288, 0, ...
 02575   404   NtContinue  (1244288, 0, ...
 02576   404   NtContinue  (1244288, 0, ...
 02577   404   NtContinue  (1244288, 0, ...
 02578   404   NtContinue  (1244288, 0, ...
 02579   404   NtContinue  (1244288, 0, ...
 02580   404   NtContinue  (1244288, 0, ...
 02581   404   NtContinue  (1244288, 0, ...
 02582   404   NtContinue  (1244288, 0, ...
 02583   404   NtContinue  (1244288, 0, ...
 02584   404   NtContinue  (1244288, 0, ...
 02585   404   NtContinue  (1244288, 0, ...
 02586   404   NtContinue  (1244288, 0, ...
 02587   404   NtContinue  (1244288, 0, ...
 02588   404   NtContinue  (1244288, 0, ...
 02589   404   NtContinue  (1244288, 0, ...
 02590   404   NtContinue  (1244288, 0, ...
 02591   404   NtContinue  (1244288, 0, ...
 02592   404   NtContinue  (1244288, 0, ...
 02593   404   NtContinue  (1244288, 0, ...
 02594   404   NtContinue  (1244288, 0, ...
 02595   404   NtContinue  (1244288, 0, ...
 02596   404   NtContinue  (1244288, 0, ...
 02597   404   NtContinue  (1244288, 0, ...
 02598   404   NtContinue  (1244288, 0, ...
 02599   404   NtContinue  (1244288, 0, ...
 02600   404   NtContinue  (1244288, 0, ...
 02601   404   NtContinue  (1244288, 0, ...
 02602   404   NtContinue  (1244288, 0, ...
 02603   404   NtContinue  (1244288, 0, ...
 02604   404   NtContinue  (1244288, 0, ...
 02605   404   NtContinue  (1244288, 0, ...
 02606   404   NtContinue  (1244288, 0, ...
 02607   404   NtContinue  (1244288, 0, ...
 02608   404   NtContinue  (1244288, 0, ...
 02609   404   NtContinue  (1244288, 0, ...
 02610   404   NtContinue  (1244288, 0, ...
 02611   404   NtContinue  (1244288, 0, ...
 02612   404   NtContinue  (1244288, 0, ...
 02613   404   NtContinue  (1244288, 0, ...
 02614   404   NtContinue  (1244288, 0, ...
 02615   404   NtContinue  (1244288, 0, ...
 02616   404   NtContinue  (1244288, 0, ...
 02617   404   NtContinue  (1244288, 0, ...
 02618   404   NtContinue  (1244288, 0, ...
 02619   404   NtContinue  (1244288, 0, ...
 02620   404   NtContinue  (1244288, 0, ...
 02621   404   NtContinue  (1244288, 0, ...
 02622   404   NtContinue  (1244288, 0, ...
 02623   404   NtContinue  (1244288, 0, ...
 02624   404   NtContinue  (1244288, 0, ...
 02625   404   NtContinue  (1244288, 0, ...
 02626   404   NtContinue  (1244288, 0, ...
 02627   404   NtContinue  (1244288, 0, ...
 02628   404   NtContinue  (1244288, 0, ...
 02629   404   NtContinue  (1244288, 0, ...
 02630   404   NtContinue  (1244288, 0, ...
 02631   404   NtContinue  (1244288, 0, ...
 02632   404   NtContinue  (1244288, 0, ...
 02633   404   NtContinue  (1244288, 0, ...
 02634   404   NtContinue  (1244288, 0, ...
 02635   404   NtContinue  (1244288, 0, ...
 02636   404   NtContinue  (1244288, 0, ...
 02637   404   NtContinue  (1244288, 0, ...
 02638   404   NtContinue  (1244288, 0, ...
 02639   404   NtContinue  (1244288, 0, ...
 02640   404   NtContinue  (1244288, 0, ...
 02641   404   NtContinue  (1244288, 0, ...
 02642   404   NtContinue  (1244288, 0, ...
 02643   404   NtContinue  (1244288, 0, ...
 02644   404   NtContinue  (1244288, 0, ...
 02645   404   NtContinue  (1244288, 0, ...
 02646   404   NtContinue  (1244288, 0, ...
 02647   404   NtContinue  (1244288, 0, ...
 02648   404   NtContinue  (1244288, 0, ...
 02649   404   NtContinue  (1244288, 0, ...
 02650   404   NtContinue  (1244288, 0, ...
 02651   404   NtContinue  (1244288, 0, ...
 02652   404   NtContinue  (1244288, 0, ...
 02653   404   NtContinue  (1244288, 0, ...
 02654   404   NtContinue  (1244288, 0, ...
 02655   404   NtContinue  (1244288, 0, ...
 02656   404   NtContinue  (1244288, 0, ...
 02657   404   NtContinue  (1244288, 0, ...
 02658   404   NtContinue  (1244288, 0, ...
 02659   404   NtContinue  (1244288, 0, ...
 02660   404   NtContinue  (1244288, 0, ...
 02661   404   NtContinue  (1244288, 0, ...
 02662   404   NtContinue  (1244288, 0, ...
 02663   404   NtContinue  (1244288, 0, ...
 02664   404   NtContinue  (1244288, 0, ...
 02665   404   NtContinue  (1244288, 0, ...
 02666   404   NtContinue  (1244288, 0, ...
 02667   404   NtContinue  (1244288, 0, ...
 02668   404   NtContinue  (1244288, 0, ...
 02669   404   NtContinue  (1244288, 0, ...
 02670   404   NtContinue  (1244288, 0, ...
 02671   404   NtContinue  (1244288, 0, ...
 02672   404   NtContinue  (1244288, 0, ...
 02673   404   NtContinue  (1244288, 0, ...
 02674   404   NtContinue  (1244288, 0, ...
 02675   404   NtContinue  (1244288, 0, ...
 02676   404   NtContinue  (1244288, 0, ...
 02677   404   NtContinue  (1244288, 0, ...
 02678   404   NtContinue  (1244288, 0, ...
 02679   404   NtContinue  (1244288, 0, ...
 02680   404   NtContinue  (1244288, 0, ...
 02681   404   NtContinue  (1244288, 0, ...
 02682   404   NtContinue  (1244288, 0, ...
 02683   404   NtContinue  (1244288, 0, ...
 02684   404   NtContinue  (1244288, 0, ...
 02685   404   NtContinue  (1244288, 0, ...
 02686   404   NtContinue  (1244288, 0, ...
 02687   404   NtContinue  (1244288, 0, ...
 02688   404   NtContinue  (1244288, 0, ...
 02689   404   NtContinue  (1244288, 0, ...
 02690   404   NtContinue  (1244288, 0, ...
 02691   404   NtContinue  (1244288, 0, ...
 02692   404   NtContinue  (1244288, 0, ...
 02693   404   NtContinue  (1244288, 0, ...
 02694   404   NtContinue  (1244288, 0, ...
 02695   404   NtContinue  (1244288, 0, ...
 02696   404   NtContinue  (1244288, 0, ...
 02697   404   NtContinue  (1244288, 0, ...
 02698   404   NtContinue  (1244288, 0, ...
 02699   404   NtContinue  (1244288, 0, ...
 02700   404   NtContinue  (1244288, 0, ...
 02701   404   NtContinue  (1244288, 0, ...
 02702   404   NtContinue  (1244288, 0, ...
 02703   404   NtContinue  (1244288, 0, ...
 02704   404   NtContinue  (1244288, 0, ...
 02705   404   NtContinue  (1244288, 0, ...
 02706   404   NtContinue  (1244288, 0, ...
 02707   404   NtContinue  (1244288, 0, ...
 02708   404   NtContinue  (1244288, 0, ...
 02709   404   NtContinue  (1244288, 0, ...
 02710   404   NtContinue  (1244288, 0, ...
 02711   404   NtContinue  (1244288, 0, ...
 02712   404   NtContinue  (1244288, 0, ...
 02713   404   NtContinue  (1244288, 0, ...
 02714   404   NtContinue  (1244288, 0, ...
 02715   404   NtContinue  (1244288, 0, ...
 02716   404   NtContinue  (1244288, 0, ...
 02717   404   NtContinue  (1244288, 0, ...
 02718   404   NtContinue  (1244288, 0, ...
 02719   404   NtContinue  (1244288, 0, ...
 02720   404   NtContinue  (1244288, 0, ...
 02721   404   NtContinue  (1244288, 0, ...
 02722   404   NtContinue  (1244288, 0, ...
 02723   404   NtContinue  (1244288, 0, ...
 02724   404   NtContinue  (1244288, 0, ...
 02725   404   NtContinue  (1244288, 0, ...
 02726   404   NtContinue  (1244288, 0, ...
 02727   404   NtContinue  (1244288, 0, ...
 02728   404   NtContinue  (1244288, 0, ...
 02729   404   NtContinue  (1244288, 0, ...
 02730   404   NtContinue  (1244288, 0, ...
 02731   404   NtContinue  (1244288, 0, ...
 02732   404   NtContinue  (1244288, 0, ...
 02733   404   NtContinue  (1244288, 0, ...
 02734   404   NtContinue  (1244288, 0, ...
 02735   404   NtContinue  (1244288, 0, ...
 02736   404   NtContinue  (1244288, 0, ...
 02737   404   NtContinue  (1244288, 0, ...
 02738   404   NtContinue  (1244288, 0, ...
 02739   404   NtContinue  (1244288, 0, ...
 02740   404   NtContinue  (1244288, 0, ...
 02741   404   NtContinue  (1244288, 0, ...
 02742   404   NtContinue  (1244288, 0, ...
 02743   404   NtContinue  (1244288, 0, ...
 02744   404   NtContinue  (1244288, 0, ...
 02745   404   NtContinue  (1244288, 0, ...
 02746   404   NtContinue  (1244288, 0, ...
 02747   404   NtContinue  (1244288, 0, ...
 02748   404   NtContinue  (1244288, 0, ...
 02749   404   NtContinue  (1244288, 0, ...
 02750   404   NtContinue  (1244288, 0, ...
 02751   404   NtContinue  (1244288, 0, ...
 02752   404   NtContinue  (1244288, 0, ...
 02753   404   NtContinue  (1244288, 0, ...
 02754   404   NtContinue  (1244288, 0, ...
 02755   404   NtContinue  (1244288, 0, ...
 02756   404   NtContinue  (1244288, 0, ...
 02757   404   NtContinue  (1244288, 0, ...
 02758   404   NtContinue  (1244288, 0, ...
 02759   404   NtContinue  (1244288, 0, ...
 02760   404   NtContinue  (1244288, 0, ...
 02761   404   NtContinue  (1244288, 0, ...
 02762   404   NtContinue  (1244288, 0, ...
 02763   404   NtContinue  (1244288, 0, ...
 02764   404   NtContinue  (1244288, 0, ...
 02765   404   NtContinue  (1244288, 0, ...
 02766   404   NtContinue  (1244288, 0, ...
 02767   404   NtContinue  (1244288, 0, ...
 02768   404   NtContinue  (1244288, 0, ...
 02769   404   NtContinue  (1244288, 0, ...
 02770   404   NtContinue  (1244288, 0, ...
 02771   404   NtContinue  (1244288, 0, ...
 02772   404   NtContinue  (1244288, 0, ...
 02773   404   NtContinue  (1244288, 0, ...
 02774   404   NtContinue  (1244288, 0, ...
 02775   404   NtContinue  (1244288, 0, ...
 02776   404   NtContinue  (1244288, 0, ...
 02777   404   NtContinue  (1244288, 0, ...
 02778   404   NtContinue  (1244288, 0, ...
 02779   404   NtContinue  (1244288, 0, ...
 02780   404   NtContinue  (1244288, 0, ...
 02781   404   NtContinue  (1244288, 0, ...
 02782   404   NtContinue  (1244288, 0, ...
 02783   404   NtContinue  (1244288, 0, ...
 02784   404   NtContinue  (1244288, 0, ...
 02785   404   NtContinue  (1244288, 0, ...
 02786   404   NtContinue  (1244288, 0, ...
 02787   404   NtContinue  (1244288, 0, ...
 02788   404   NtContinue  (1244288, 0, ...
 02789   404   NtContinue  (1244288, 0, ...
 02790   404   NtContinue  (1244288, 0, ...
 02791   404   NtContinue  (1244288, 0, ...
 02792   404   NtContinue  (1244288, 0, ...
 02793   404   NtContinue  (1244288, 0, ...
 02794   404   NtContinue  (1244288, 0, ...
 02795   404   NtContinue  (1244288, 0, ...
 02796   404   NtContinue  (1244288, 0, ...
 02797   404   NtContinue  (1244288, 0, ...
 02798   404   NtContinue  (1244288, 0, ...
 02799   404   NtContinue  (1244288, 0, ...
 02800   404   NtContinue  (1244288, 0, ...
 02801   404   NtContinue  (1244288, 0, ...
 02802   404   NtContinue  (1244288, 0, ...
 02803   404   NtContinue  (1244288, 0, ...
 02804   404   NtContinue  (1244288, 0, ...
 02805   404   NtContinue  (1244288, 0, ...
 02806   404   NtContinue  (1244288, 0, ...
 02807   404   NtContinue  (1244288, 0, ...
 02808   404   NtContinue  (1244288, 0, ...
 02809   404   NtContinue  (1244288, 0, ...
 02810   404   NtContinue  (1244288, 0, ...
 02811   404   NtContinue  (1244288, 0, ...
 02812   404   NtContinue  (1244288, 0, ...
 02813   404   NtContinue  (1244288, 0, ...
 02814   404   NtContinue  (1244288, 0, ...
 02815   404   NtContinue  (1244288, 0, ...
 02816   404   NtContinue  (1244288, 0, ...
 02817   404   NtContinue  (1244288, 0, ...
 02818   404   NtContinue  (1244288, 0, ...
 02819   404   NtContinue  (1244288, 0, ...
 02820   404   NtContinue  (1244288, 0, ...
 02821   404   NtContinue  (1244288, 0, ...
 02822   404   NtContinue  (1244288, 0, ...
 02823   404   NtContinue  (1244288, 0, ...
 02824   404   NtContinue  (1244288, 0, ...
 02825   404   NtContinue  (1244288, 0, ...
 02826   404   NtContinue  (1244288, 0, ...
 02827   404   NtContinue  (1244288, 0, ...
 02828   404   NtContinue  (1244288, 0, ...
 02829   404   NtContinue  (1244288, 0, ...
 02830   404   NtContinue  (1244288, 0, ...
 02831   404   NtContinue  (1244288, 0, ...
 02832   404   NtContinue  (1244288, 0, ...
 02833   404   NtContinue  (1244288, 0, ...
 02834   404   NtContinue  (1244288, 0, ...
 02835   404   NtContinue  (1244288, 0, ...
 02836   404   NtContinue  (1244288, 0, ...
 02837   404   NtContinue  (1244288, 0, ...
 02838   404   NtContinue  (1244288, 0, ...
 02839   404   NtContinue  (1244288, 0, ...
 02840   404   NtContinue  (1244288, 0, ...
 02841   404   NtContinue  (1244288, 0, ...
 02842   404   NtContinue  (1244288, 0, ...
 02843   404   NtContinue  (1244288, 0, ...
 02844   404   NtContinue  (1244288, 0, ...
 02845   404   NtContinue  (1244288, 0, ...
 02846   404   NtContinue  (1244288, 0, ...
 02847   404   NtContinue  (1244288, 0, ...
 02848   404   NtContinue  (1244288, 0, ...
 02849   404   NtContinue  (1244288, 0, ...
 02850   404   NtContinue  (1244288, 0, ...
 02851   404   NtContinue  (1244288, 0, ...
 02852   404   NtContinue  (1244288, 0, ...
 02853   404   NtContinue  (1244288, 0, ...
 02854   404   NtContinue  (1244288, 0, ...
 02855   404   NtContinue  (1244288, 0, ...
 02856   404   NtContinue  (1244288, 0, ...
 02857   404   NtContinue  (1244288, 0, ...
 02858   404   NtContinue  (1244288, 0, ...
 02859   404   NtContinue  (1244288, 0, ...
 02860   404   NtContinue  (1244288, 0, ...
 02861   404   NtContinue  (1244288, 0, ...
 02862   404   NtContinue  (1244288, 0, ...
 02863   404   NtContinue  (1244288, 0, ...
 02864   404   NtContinue  (1244288, 0, ...
 02865   404   NtContinue  (1244288, 0, ...
 02866   404   NtContinue  (1244288, 0, ...
 02867   404   NtContinue  (1244288, 0, ...
 02868   404   NtContinue  (1244288, 0, ...
 02869   404   NtContinue  (1244288, 0, ...
 02870   404   NtContinue  (1244288, 0, ...
 02871   404   NtContinue  (1244288, 0, ...
 02872   404   NtContinue  (1244288, 0, ...
 02873   404   NtContinue  (1244288, 0, ...
 02874   404   NtContinue  (1244288, 0, ...
 02875   404   NtContinue  (1244288, 0, ...
 02876   404   NtContinue  (1244288, 0, ...
 02877   404   NtContinue  (1244288, 0, ...
 02878   404   NtContinue  (1244288, 0, ...
 02879   404   NtContinue  (1244288, 0, ...
 02880   404   NtContinue  (1244288, 0, ...
 02881   404   NtContinue  (1244288, 0, ...
 02882   404   NtContinue  (1244288, 0, ...
 02883   404   NtContinue  (1244288, 0, ...
 02884   404   NtContinue  (1244288, 0, ...
 02885   404   NtContinue  (1244288, 0, ...
 02886   404   NtContinue  (1244288, 0, ...
 02887   404   NtContinue  (1244288, 0, ...
 02888   404   NtContinue  (1244288, 0, ...
 02889   404   NtContinue  (1244288, 0, ...
 02890   404   NtContinue  (1244288, 0, ...
 02891   404   NtContinue  (1244288, 0, ...
 02892   404   NtContinue  (1244288, 0, ...
 02893   404   NtContinue  (1244288, 0, ...
 02894   404   NtContinue  (1244288, 0, ...
 02895   404   NtContinue  (1244288, 0, ...
 02896   404   NtContinue  (1244288, 0, ...
 02897   404   NtContinue  (1244288, 0, ...
 02898   404   NtContinue  (1244288, 0, ...
 02899   404   NtContinue  (1244288, 0, ...
 02900   404   NtContinue  (1244288, 0, ...
 02901   404   NtContinue  (1244288, 0, ...
 02902   404   NtContinue  (1244288, 0, ...
 02903   404   NtContinue  (1244288, 0, ...
 02904   404   NtContinue  (1244288, 0, ...
 02905   404   NtContinue  (1244288, 0, ...
 02906   404   NtContinue  (1244288, 0, ...
 02907   404   NtContinue  (1244288, 0, ...
 02908   404   NtContinue  (1244288, 0, ...
 02909   404   NtContinue  (1244288, 0, ...
 02910   404   NtContinue  (1244288, 0, ...
 02911   404   NtContinue  (1244288, 0, ...
 02912   404   NtContinue  (1244288, 0, ...
 02913   404   NtContinue  (1244288, 0, ...
 02914   404   NtContinue  (1244288, 0, ...
 02915   404   NtContinue  (1244288, 0, ...
 02916   404   NtContinue  (1244288, 0, ...
 02917   404   NtContinue  (1244288, 0, ...
 02918   404   NtContinue  (1244288, 0, ...
 02919   404   NtContinue  (1244288, 0, ...
 02920   404   NtContinue  (1244288, 0, ...
 02921   404   NtContinue  (1244288, 0, ...
 02922   404   NtContinue  (1244288, 0, ...
 02923   404   NtContinue  (1244288, 0, ...
 02924   404   NtContinue  (1244288, 0, ...
 02925   404   NtContinue  (1244288, 0, ...
 02926   404   NtContinue  (1244288, 0, ...
 02927   404   NtContinue  (1244288, 0, ...
 02928   404   NtContinue  (1244288, 0, ...
 02929   404   NtContinue  (1244288, 0, ...
 02930   404   NtContinue  (1244288, 0, ...
 02931   404   NtContinue  (1244288, 0, ...
 02932   404   NtContinue  (1244288, 0, ...
 02933   404   NtContinue  (1244288, 0, ...
 02934   404   NtContinue  (1244288, 0, ...
 02935   404   NtContinue  (1244288, 0, ...
 02936   404   NtContinue  (1244288, 0, ...
 02937   404   NtContinue  (1244288, 0, ...
 02938   404   NtContinue  (1244288, 0, ...
 02939   404   NtContinue  (1244288, 0, ...
 02940   404   NtContinue  (1244288, 0, ...
 02941   404   NtContinue  (1244288, 0, ...
 02942   404   NtContinue  (1244288, 0, ...
 02943   404   NtContinue  (1244288, 0, ...
 02944   404   NtContinue  (1244288, 0, ...
 02945   404   NtContinue  (1244288, 0, ...
 02946   404   NtContinue  (1244288, 0, ...
 02947   404   NtContinue  (1244288, 0, ...
 02948   404   NtContinue  (1244288, 0, ...
 02949   404   NtContinue  (1244288, 0, ...
 02950   404   NtContinue  (1244288, 0, ...
 02951   404   NtContinue  (1244288, 0, ...
 02952   404   NtContinue  (1244288, 0, ...
 02953   404   NtContinue  (1244288, 0, ...
 02954   404   NtContinue  (1244288, 0, ...
 02955   404   NtContinue  (1244288, 0, ...
 02956   404   NtContinue  (1244288, 0, ...
 02957   404   NtContinue  (1244288, 0, ...
 02958   404   NtContinue  (1244288, 0, ...
 02959   404   NtContinue  (1244288, 0, ...
 02960   404   NtContinue  (1244288, 0, ...
 02961   404   NtContinue  (1244288, 0, ...
 02962   404   NtContinue  (1244288, 0, ...
 02963   404   NtContinue  (1244288, 0, ...
 02964   404   NtContinue  (1244288, 0, ...
 02965   404   NtContinue  (1244288, 0, ...
 02966   404   NtContinue  (1244288, 0, ...
 02967   404   NtContinue  (1244288, 0, ...
 02968   404   NtContinue  (1244288, 0, ...
 02969   404   NtContinue  (1244288, 0, ...
 02970   404   NtContinue  (1244288, 0, ...
 02971   404   NtContinue  (1244288, 0, ...
 02972   404   NtContinue  (1244288, 0, ...
 02973   404   NtContinue  (1244288, 0, ...
 02974   404   NtContinue  (1244288, 0, ...
 02975   404   NtContinue  (1244288, 0, ...
 02976   404   NtContinue  (1244288, 0, ...
 02977   404   NtContinue  (1244288, 0, ...
 02978   404   NtContinue  (1244288, 0, ...
 02979   404   NtContinue  (1244288, 0, ...
 02980   404   NtContinue  (1244288, 0, ...
 02981   404   NtContinue  (1244288, 0, ...
 02982   404   NtContinue  (1244288, 0, ...
 02983   404   NtContinue  (1244288, 0, ...
 02984   404   NtContinue  (1244288, 0, ...
 02985   404   NtContinue  (1244288, 0, ...
 02986   404   NtContinue  (1244288, 0, ...
 02987   404   NtContinue  (1244288, 0, ...
 02988   404   NtContinue  (1244288, 0, ...
 02989   404   NtContinue  (1244288, 0, ...
 02990   404   NtContinue  (1244288, 0, ...
 02991   404   NtContinue  (1244288, 0, ...
 02992   404   NtContinue  (1244288, 0, ...
 02993   404   NtContinue  (1244288, 0, ...
 02994   404   NtContinue  (1244288, 0, ...
 02995   404   NtContinue  (1244288, 0, ...
 02996   404   NtContinue  (1244288, 0, ...
 02997   404   NtContinue  (1244288, 0, ...
 02998   404   NtContinue  (1244288, 0, ...
 02999   404   NtContinue  (1244288, 0, ...
 03000   404   NtContinue  (1244288, 0, ...
 03001   404   NtContinue  (1244288, 0, ...
 03002   404   NtContinue  (1244288, 0, ...
 03003   404   NtContinue  (1244288, 0, ...
 03004   404   NtContinue  (1244288, 0, ...
 03005   404   NtContinue  (1244288, 0, ...
 03006   404   NtContinue  (1244288, 0, ...
 03007   404   NtContinue  (1244288, 0, ...
 03008   404   NtContinue  (1244288, 0, ...
 03009   404   NtContinue  (1244288, 0, ...
 03010   404   NtContinue  (1244288, 0, ...
 03011   404   NtContinue  (1244288, 0, ...
 03012   404   NtContinue  (1244288, 0, ...
 03013   404   NtContinue  (1244288, 0, ...
 03014   404   NtContinue  (1244288, 0, ...
 03015   404   NtContinue  (1244288, 0, ...
 03016   404   NtContinue  (1244288, 0, ...
 03017   404   NtContinue  (1244288, 0, ...
 03018   404   NtContinue  (1244288, 0, ...
 03019   404   NtContinue  (1244288, 0, ...
 03020   404   NtContinue  (1244288, 0, ...
 03021   404   NtContinue  (1244288, 0, ...
 03022   404   NtContinue  (1244288, 0, ...
 03023   404   NtContinue  (1244288, 0, ...
 03024   404   NtContinue  (1244288, 0, ...
 03025   404   NtContinue  (1244288, 0, ...
 03026   404   NtContinue  (1244288, 0, ...
 03027   404   NtContinue  (1244288, 0, ...
 03028   404   NtContinue  (1244288, 0, ...
 03029   404   NtContinue  (1244288, 0, ...
 03030   404   NtContinue  (1244288, 0, ...
 03031   404   NtContinue  (1244288, 0, ...
 03032   404   NtContinue  (1244288, 0, ...
 03033   404   NtContinue  (1244288, 0, ...
 03034   404   NtContinue  (1244288, 0, ...
 03035   404   NtContinue  (1244288, 0, ...
 03036   404   NtContinue  (1244288, 0, ...
 03037   404   NtContinue  (1244288, 0, ...
 03038   404   NtContinue  (1244288, 0, ...
 03039   404   NtContinue  (1244288, 0, ...
 03040   404   NtContinue  (1244288, 0, ...
 03041   404   NtContinue  (1244288, 0, ...
 03042   404   NtContinue  (1244288, 0, ...
 03043   404   NtContinue  (1244288, 0, ...
 03044   404   NtContinue  (1244288, 0, ...
 03045   404   NtContinue  (1244288, 0, ...
 03046   404   NtContinue  (1244288, 0, ...
 03047   404   NtContinue  (1244288, 0, ...
 03048   404   NtContinue  (1244288, 0, ...
 03049   404   NtContinue  (1244288, 0, ...
 03050   404   NtContinue  (1244288, 0, ...
 03051   404   NtContinue  (1244288, 0, ...
 03052   404   NtContinue  (1244288, 0, ...
 03053   404   NtContinue  (1244288, 0, ...
 03054   404   NtContinue  (1244288, 0, ...
 03055   404   NtContinue  (1244288, 0, ...
 03056   404   NtContinue  (1244288, 0, ...
 03057   404   NtContinue  (1244288, 0, ...
 03058   404   NtContinue  (1244288, 0, ...
 03059   404   NtContinue  (1244288, 0, ...
 03060   404   NtContinue  (1244288, 0, ...
 03061   404   NtContinue  (1244288, 0, ...
 03062   404   NtContinue  (1244288, 0, ...
 03063   404   NtContinue  (1244288, 0, ...
 03064   404   NtContinue  (1244288, 0, ...
 03065   404   NtContinue  (1244288, 0, ...
 03066   404   NtContinue  (1244288, 0, ...
 03067   404   NtContinue  (1244288, 0, ...
 03068   404   NtContinue  (1244288, 0, ...
 03069   404   NtContinue  (1244288, 0, ...
 03070   404   NtContinue  (1244288, 0, ...
 03071   404   NtContinue  (1244288, 0, ...
 03072   404   NtContinue  (1244288, 0, ...
 03073   404   NtContinue  (1244288, 0, ...
 03074   404   NtContinue  (1244288, 0, ...
 03075   404   NtContinue  (1244288, 0, ...
 03076   404   NtContinue  (1244288, 0, ...
 03077   404   NtContinue  (1244288, 0, ...
 03078   404   NtContinue  (1244288, 0, ...
 03079   404   NtContinue  (1244288, 0, ...
 03080   404   NtContinue  (1244288, 0, ...
 03081   404   NtContinue  (1244288, 0, ...
 03082   404   NtContinue  (1244288, 0, ...
 03083   404   NtContinue  (1244288, 0, ...
 03084   404   NtContinue  (1244288, 0, ...
 03085   404   NtContinue  (1244288, 0, ...
 03086   404   NtContinue  (1244288, 0, ...
 03087   404   NtContinue  (1244288, 0, ...
 03088   404   NtContinue  (1244288, 0, ...
 03089   404   NtContinue  (1244288, 0, ...
 03090   404   NtContinue  (1244288, 0, ...
 03091   404   NtContinue  (1244288, 0, ...
 03092   404   NtContinue  (1244288, 0, ...
 03093   404   NtContinue  (1244288, 0, ...
 03094   404   NtContinue  (1244288, 0, ...
 03095   404   NtContinue  (1244288, 0, ...
 03096   404   NtContinue  (1244288, 0, ...
 03097   404   NtContinue  (1244288, 0, ...
 03098   404   NtContinue  (1244288, 0, ...
 03099   404   NtContinue  (1244288, 0, ...
 03100   404   NtContinue  (1244288, 0, ...
 03101   404   NtContinue  (1244288, 0, ...
 03102   404   NtContinue  (1244288, 0, ...
 03103   404   NtContinue  (1244288, 0, ...
 03104   404   NtContinue  (1244288, 0, ...
 03105   404   NtContinue  (1244288, 0, ...
 03106   404   NtContinue  (1244288, 0, ...
 03107   404   NtContinue  (1244288, 0, ...
 03108   404   NtContinue  (1244288, 0, ...
 03109   404   NtContinue  (1244288, 0, ...
 03110   404   NtContinue  (1244288, 0, ...
 03111   404   NtContinue  (1244288, 0, ...
 03112   404   NtContinue  (1244288, 0, ...
 03113   404   NtContinue  (1244288, 0, ...
 03114   404   NtContinue  (1244288, 0, ...
 03115   404   NtContinue  (1244288, 0, ...
 03116   404   NtContinue  (1244288, 0, ...
 03117   404   NtContinue  (1244288, 0, ...
 03118   404   NtContinue  (1244288, 0, ...
 03119   404   NtContinue  (1244288, 0, ...
 03120   404   NtContinue  (1244288, 0, ...
 03121   404   NtContinue  (1244288, 0, ...
 03122   404   NtContinue  (1244288, 0, ...
 03123   404   NtContinue  (1244288, 0, ...
 03124   404   NtContinue  (1244288, 0, ...
 03125   404   NtContinue  (1244288, 0, ...
 03126   404   NtContinue  (1244288, 0, ...
 03127   404   NtContinue  (1244288, 0, ...
 03128   404   NtContinue  (1244288, 0, ...
 03129   404   NtContinue  (1244288, 0, ...
 03130   404   NtContinue  (1244288, 0, ...
 03131   404   NtContinue  (1244288, 0, ...
 03132   404   NtContinue  (1244288, 0, ...
 03133   404   NtContinue  (1244288, 0, ...
 03134   404   NtContinue  (1244288, 0, ...
 03135   404   NtContinue  (1244288, 0, ...
 03136   404   NtContinue  (1244288, 0, ...
 03137   404   NtContinue  (1244288, 0, ...
 03138   404   NtContinue  (1244288, 0, ...
 03139   404   NtContinue  (1244288, 0, ...
 03140   404   NtContinue  (1244288, 0, ...
 03141   404   NtContinue  (1244288, 0, ...
 03142   404   NtContinue  (1244288, 0, ...
 03143   404   NtContinue  (1244288, 0, ...
 03144   404   NtContinue  (1244288, 0, ...
 03145   404   NtContinue  (1244288, 0, ...
 03146   404   NtContinue  (1244288, 0, ...
 03147   404   NtContinue  (1244288, 0, ...
 03148   404   NtContinue  (1244288, 0, ...
 03149   404   NtContinue  (1244288, 0, ...
 03150   404   NtContinue  (1244288, 0, ...
 03151   404   NtContinue  (1244288, 0, ...
 03152   404   NtContinue  (1244288, 0, ...
 03153   404   NtContinue  (1244288, 0, ...
 03154   404   NtContinue  (1244288, 0, ...
 03155   404   NtContinue  (1244288, 0, ...
 03156   404   NtContinue  (1244288, 0, ...
 03157   404   NtContinue  (1244288, 0, ...
 03158   404   NtContinue  (1244288, 0, ...
 03159   404   NtContinue  (1244288, 0, ...
 03160   404   NtContinue  (1244288, 0, ...
 03161   404   NtContinue  (1244288, 0, ...
 03162   404   NtContinue  (1244288, 0, ...
 03163   404   NtContinue  (1244288, 0, ...
 03164   404   NtContinue  (1244288, 0, ...
 03165   404   NtContinue  (1244288, 0, ...
 03166   404   NtContinue  (1244288, 0, ...
 03167   404   NtContinue  (1244288, 0, ...
 03168   404   NtContinue  (1244288, 0, ...
 03169   404   NtContinue  (1244288, 0, ...
 03170   404   NtContinue  (1244288, 0, ...
 03171   404   NtContinue  (1244288, 0, ...
 03172   404   NtContinue  (1244288, 0, ...
 03173   404   NtContinue  (1244288, 0, ...
 03174   404   NtContinue  (1244288, 0, ...
 03175   404   NtContinue  (1244288, 0, ...
 03176   404   NtContinue  (1244288, 0, ...
 03177   404   NtContinue  (1244288, 0, ...
 03178   404   NtContinue  (1244288, 0, ...
 03179   404   NtContinue  (1244288, 0, ...
 03180   404   NtContinue  (1244288, 0, ...
 03181   404   NtContinue  (1244288, 0, ...
 03182   404   NtContinue  (1244288, 0, ...
 03183   404   NtContinue  (1244288, 0, ...
 03184   404   NtContinue  (1244288, 0, ...
 03185   404   NtContinue  (1244288, 0, ...
 03186   404   NtContinue  (1244288, 0, ...
 03187   404   NtContinue  (1244288, 0, ...
 03188   404   NtContinue  (1244288, 0, ...
 03189   404   NtContinue  (1244288, 0, ...
 03190   404   NtContinue  (1244288, 0, ...
 03191   404   NtContinue  (1244288, 0, ...
 03192   404   NtContinue  (1244288, 0, ...
 03193   404   NtContinue  (1244288, 0, ...
 03194   404   NtContinue  (1244288, 0, ...
 03195   404   NtContinue  (1244288, 0, ...
 03196   404   NtContinue  (1244288, 0, ...
 03197   404   NtContinue  (1244288, 0, ...
 03198   404   NtContinue  (1244288, 0, ...
 03199   404   NtContinue  (1244288, 0, ...
 03200   404   NtContinue  (1244288, 0, ...
 03201   404   NtContinue  (1244288, 0, ...
 03202   404   NtContinue  (1244288, 0, ...
 03203   404   NtContinue  (1244288, 0, ...
 03204   404   NtContinue  (1244288, 0, ...
 03205   404   NtContinue  (1244288, 0, ...
 03206   404   NtContinue  (1244288, 0, ...
 03207   404   NtContinue  (1244288, 0, ...
 03208   404   NtContinue  (1244288, 0, ...
 03209   404   NtContinue  (1244288, 0, ...
 03210   404   NtContinue  (1244288, 0, ...
 03211   404   NtContinue  (1244288, 0, ...
 03212   404   NtContinue  (1244288, 0, ...
 03213   404   NtContinue  (1244288, 0, ...
 03214   404   NtContinue  (1244288, 0, ...
 03215   404   NtContinue  (1244288, 0, ...
 03216   404   NtContinue  (1244288, 0, ...
 03217   404   NtContinue  (1244288, 0, ...
 03218   404   NtContinue  (1244288, 0, ...
 03219   404   NtContinue  (1244288, 0, ...
 03220   404   NtContinue  (1244288, 0, ...
 03221   404   NtContinue  (1244288, 0, ...
 03222   404   NtContinue  (1244288, 0, ...
 03223   404   NtContinue  (1244288, 0, ...
 03224   404   NtContinue  (1244288, 0, ...
 03225   404   NtContinue  (1244288, 0, ...
 03226   404   NtContinue  (1244288, 0, ...
 03227   404   NtContinue  (1244288, 0, ...
 03228   404   NtContinue  (1244288, 0, ...
 03229   404   NtContinue  (1244288, 0, ...
 03230   404   NtContinue  (1244288, 0, ...
 03231   404   NtContinue  (1244288, 0, ...
 03232   404   NtContinue  (1244288, 0, ...
 03233   404   NtContinue  (1244288, 0, ...
 03234   404   NtContinue  (1244288, 0, ...
 03235   404   NtContinue  (1244288, 0, ...
 03236   404   NtContinue  (1244288, 0, ...
 03237   404   NtContinue  (1244288, 0, ...
 03238   404   NtContinue  (1244288, 0, ...
 03239   404   NtContinue  (1244288, 0, ...
 03240   404   NtContinue  (1244288, 0, ...
 03241   404   NtContinue  (1244288, 0, ...
 03242   404   NtContinue  (1244288, 0, ...
 03243   404   NtContinue  (1244288, 0, ...
 03244   404   NtContinue  (1244288, 0, ...
 03245   404   NtContinue  (1244288, 0, ...
 03246   404   NtContinue  (1244288, 0, ...
 03247   404   NtContinue  (1244288, 0, ...
 03248   404   NtContinue  (1244288, 0, ...
 03249   404   NtContinue  (1244288, 0, ...
 03250   404   NtContinue  (1244288, 0, ...
 03251   404   NtContinue  (1244288, 0, ...
 03252   404   NtContinue  (1244288, 0, ...
 03253   404   NtContinue  (1244288, 0, ...
 03254   404   NtContinue  (1244288, 0, ...
 03255   404   NtContinue  (1244288, 0, ...
 03256   404   NtContinue  (1244288, 0, ...
 03257   404   NtContinue  (1244288, 0, ...
 03258   404   NtContinue  (1244288, 0, ...
 03259   404   NtContinue  (1244288, 0, ...
 03260   404   NtContinue  (1244288, 0, ...
 03261   404   NtContinue  (1244288, 0, ...
 03262   404   NtContinue  (1244288, 0, ...
 03263   404   NtContinue  (1244288, 0, ...
 03264   404   NtContinue  (1244288, 0, ...
 03265   404   NtContinue  (1244288, 0, ...
 03266   404   NtContinue  (1244288, 0, ...
 03267   404   NtContinue  (1244288, 0, ...
 03268   404   NtContinue  (1244288, 0, ...
 03269   404   NtContinue  (1244288, 0, ...
 03270   404   NtContinue  (1244288, 0, ...
 03271   404   NtContinue  (1244288, 0, ...
 03272   404   NtContinue  (1244288, 0, ...
 03273   404   NtContinue  (1244288, 0, ...
 03274   404   NtContinue  (1244288, 0, ...
 03275   404   NtContinue  (1244288, 0, ...
 03276   404   NtContinue  (1244288, 0, ...
 03277   404   NtContinue  (1244288, 0, ...
 03278   404   NtContinue  (1244288, 0, ...
 03279   404   NtContinue  (1244288, 0, ...
 03280   404   NtContinue  (1244288, 0, ...
 03281   404   NtContinue  (1244288, 0, ...
 03282   404   NtContinue  (1244288, 0, ...
 03283   404   NtContinue  (1244288, 0, ...
 03284   404   NtContinue  (1244288, 0, ...
 03285   404   NtContinue  (1244288, 0, ...
 03286   404   NtContinue  (1244288, 0, ...
 03287   404   NtContinue  (1244288, 0, ...
 03288   404   NtContinue  (1244288, 0, ...
 03289   404   NtContinue  (1244288, 0, ...
 03290   404   NtContinue  (1244288, 0, ...
 03291   404   NtContinue  (1244288, 0, ...
 03292   404   NtContinue  (1244288, 0, ...
 03293   404   NtContinue  (1244288, 0, ...
 03294   404   NtContinue  (1244288, 0, ...
 03295   404   NtContinue  (1244288, 0, ...
 03296   404   NtContinue  (1244288, 0, ...
 03297   404   NtContinue  (1244288, 0, ...
 03298   404   NtContinue  (1244288, 0, ...
 03299   404   NtContinue  (1244288, 0, ...
 03300   404   NtContinue  (1244288, 0, ...
 03301   404   NtContinue  (1244288, 0, ...
 03302   404   NtContinue  (1244288, 0, ...
 03303   404   NtContinue  (1244288, 0, ...
 03304   404   NtContinue  (1244288, 0, ...
 03305   404   NtContinue  (1244288, 0, ...
 03306   404   NtContinue  (1244288, 0, ...
 03307   404   NtContinue  (1244288, 0, ...
 03308   404   NtContinue  (1244288, 0, ...
 03309   404   NtContinue  (1244288, 0, ...
 03310   404   NtContinue  (1244288, 0, ...
 03311   404   NtContinue  (1244288, 0, ...
 03312   404   NtContinue  (1244288, 0, ...
 03313   404   NtContinue  (1244288, 0, ...
 03314   404   NtContinue  (1244288, 0, ...
 03315   404   NtContinue  (1244288, 0, ...
 03316   404   NtContinue  (1244288, 0, ...
 03317   404   NtContinue  (1244288, 0, ...
 03318   404   NtContinue  (1244288, 0, ...
 03319   404   NtContinue  (1244288, 0, ...
 03320   404   NtContinue  (1244288, 0, ...
 03321   404   NtContinue  (1244288, 0, ...
 03322   404   NtContinue  (1244288, 0, ...
 03323   404   NtContinue  (1244288, 0, ...
 03324   404   NtContinue  (1244288, 0, ...
 03325   404   NtContinue  (1244288, 0, ...
 03326   404   NtContinue  (1244288, 0, ...
 03327   404   NtContinue  (1244288, 0, ...
 03328   404   NtContinue  (1244288, 0, ...
 03329   404   NtContinue  (1244288, 0, ...
 03330   404   NtContinue  (1244288, 0, ...
 03331   404   NtContinue  (1244288, 0, ...
 03332   404   NtContinue  (1244288, 0, ...
 03333   404   NtContinue  (1244288, 0, ...
 03334   404   NtContinue  (1244288, 0, ...
 03335   404   NtContinue  (1244288, 0, ...
 03336   404   NtContinue  (1244288, 0, ...
 03337   404   NtContinue  (1244288, 0, ...
 03338   404   NtContinue  (1244288, 0, ...
 03339   404   NtContinue  (1244288, 0, ...
 03340   404   NtContinue  (1244288, 0, ...
 03341   404   NtContinue  (1244288, 0, ...
 03342   404   NtContinue  (1244288, 0, ...
 03343   404   NtContinue  (1244288, 0, ...
 03344   404   NtContinue  (1244288, 0, ...
 03345   404   NtContinue  (1244288, 0, ...
 03346   404   NtContinue  (1244288, 0, ...
 03347   404   NtContinue  (1244288, 0, ...
 03348   404   NtContinue  (1244288, 0, ...
 03349   404   NtContinue  (1244288, 0, ...
 03350   404   NtContinue  (1244288, 0, ...
 03351   404   NtContinue  (1244288, 0, ...
 03352   404   NtContinue  (1244288, 0, ...
 03353   404   NtContinue  (1244288, 0, ...
 03354   404   NtContinue  (1244288, 0, ...
 03355   404   NtContinue  (1244288, 0, ...
 03356   404   NtContinue  (1244288, 0, ...
 03357   404   NtContinue  (1244288, 0, ...
 03358   404   NtContinue  (1244288, 0, ...
 03359   404   NtContinue  (1244288, 0, ...
 03360   404   NtContinue  (1244288, 0, ...
 03361   404   NtContinue  (1244288, 0, ...
 03362   404   NtContinue  (1244288, 0, ...
 03363   404   NtContinue  (1244288, 0, ...
 03364   404   NtContinue  (1244288, 0, ...
 03365   404   NtContinue  (1244288, 0, ...
 03366   404   NtContinue  (1244288, 0, ...
 03367   404   NtContinue  (1244288, 0, ...
 03368   404   NtContinue  (1244288, 0, ...
 03369   404   NtContinue  (1244288, 0, ...
 03370   404   NtContinue  (1244288, 0, ...
 03371   404   NtContinue  (1244288, 0, ...
 03372   404   NtContinue  (1244288, 0, ...
 03373   404   NtContinue  (1244288, 0, ...
 03374   404   NtContinue  (1244288, 0, ...
 03375   404   NtContinue  (1244288, 0, ...
 03376   404   NtContinue  (1244288, 0, ...
 03377   404   NtContinue  (1244288, 0, ...
 03378   404   NtContinue  (1244288, 0, ...
 03379   404   NtContinue  (1244288, 0, ...
 03380   404   NtContinue  (1244288, 0, ...
 03381   404   NtContinue  (1244288, 0, ...
 03382   404   NtContinue  (1244288, 0, ...
 03383   404   NtContinue  (1244288, 0, ...
 03384   404   NtContinue  (1244288, 0, ...
 03385   404   NtContinue  (1244288, 0, ...
 03386   404   NtContinue  (1244288, 0, ...
 03387   404   NtContinue  (1244288, 0, ...
 03388   404   NtContinue  (1244288, 0, ...
 03389   404   NtContinue  (1244288, 0, ...
 03390   404   NtContinue  (1244288, 0, ...
 03391   404   NtContinue  (1244288, 0, ...
 03392   404   NtContinue  (1244288, 0, ...
 03393   404   NtContinue  (1244288, 0, ...
 03394   404   NtContinue  (1244288, 0, ...
 03395   404   NtContinue  (1244288, 0, ...
 03396   404   NtContinue  (1244288, 0, ...
 03397   404   NtContinue  (1244288, 0, ...
 03398   404   NtContinue  (1244288, 0, ...
 03399   404   NtContinue  (1244288, 0, ...
 03400   404   NtContinue  (1244288, 0, ...
 03401   404   NtContinue  (1244288, 0, ...
 03402   404   NtContinue  (1244288, 0, ...
 03403   404   NtContinue  (1244288, 0, ...
 03404   404   NtContinue  (1244288, 0, ...
 03405   404   NtContinue  (1244288, 0, ...
 03406   404   NtContinue  (1244288, 0, ...
 03407   404   NtContinue  (1244288, 0, ...
 03408   404   NtContinue  (1244288, 0, ...
 03409   404   NtContinue  (1244288, 0, ...
 03410   404   NtContinue  (1244288, 0, ...
 03411   404   NtContinue  (1244288, 0, ...
 03412   404   NtContinue  (1244288, 0, ...
 03413   404   NtContinue  (1244288, 0, ...
 03414   404   NtContinue  (1244288, 0, ...
 03415   404   NtContinue  (1244288, 0, ...
 03416   404   NtContinue  (1244288, 0, ...
 03417   404   NtContinue  (1244288, 0, ...
 03418   404   NtContinue  (1244288, 0, ...
 03419   404   NtContinue  (1244288, 0, ...
 03420   404   NtContinue  (1244288, 0, ...
 03421   404   NtContinue  (1244288, 0, ...
 03422   404   NtContinue  (1244288, 0, ...
 03423   404   NtContinue  (1244288, 0, ...
 03424   404   NtContinue  (1244288, 0, ...
 03425   404   NtContinue  (1244288, 0, ...
 03426   404   NtContinue  (1244288, 0, ...
 03427   404   NtContinue  (1244288, 0, ...
 03428   404   NtContinue  (1244288, 0, ...
 03429   404   NtContinue  (1244288, 0, ...
 03430   404   NtContinue  (1244288, 0, ...
 03431   404   NtContinue  (1244288, 0, ...
 03432   404   NtContinue  (1244288, 0, ...
 03433   404   NtContinue  (1244288, 0, ...
 03434   404   NtContinue  (1244288, 0, ...
 03435   404   NtContinue  (1244288, 0, ...
 03436   404   NtContinue  (1244288, 0, ...
 03437   404   NtContinue  (1244288, 0, ...
 03438   404   NtContinue  (1244288, 0, ...
 03439   404   NtContinue  (1244288, 0, ...
 03440   404   NtContinue  (1244288, 0, ...
 03441   404   NtContinue  (1244288, 0, ...
 03442   404   NtContinue  (1244288, 0, ...
 03443   404   NtContinue  (1244288, 0, ...
 03444   404   NtContinue  (1244288, 0, ...
 03445   404   NtContinue  (1244288, 0, ...
 03446   404   NtContinue  (1244288, 0, ...
 03447   404   NtContinue  (1244288, 0, ...
 03448   404   NtContinue  (1244288, 0, ...
 03449   404   NtContinue  (1244288, 0, ...
 03450   404   NtContinue  (1244288, 0, ...
 03451   404   NtContinue  (1244288, 0, ...
 03452   404   NtContinue  (1244288, 0, ...
 03453   404   NtContinue  (1244288, 0, ...
 03454   404   NtContinue  (1244288, 0, ...
 03455   404   NtContinue  (1244288, 0, ...
 03456   404   NtContinue  (1244288, 0, ...
 03457   404   NtContinue  (1244288, 0, ...
 03458   404   NtContinue  (1244288, 0, ...
 03459   404   NtContinue  (1244288, 0, ...
 03460   404   NtContinue  (1244288, 0, ...
 03461   404   NtContinue  (1244288, 0, ...
 03462   404   NtContinue  (1244288, 0, ...
 03463   404   NtContinue  (1244288, 0, ...
 03464   404   NtContinue  (1244288, 0, ...
 03465   404   NtContinue  (1244288, 0, ...
 03466   404   NtContinue  (1244288, 0, ...
 03467   404   NtContinue  (1244288, 0, ...
 03468   404   NtContinue  (1244288, 0, ...
 03469   404   NtContinue  (1244288, 0, ...
 03470   404   NtContinue  (1244288, 0, ...
 03471   404   NtContinue  (1244288, 0, ...
 03472   404   NtContinue  (1244288, 0, ...
 03473   404   NtContinue  (1244288, 0, ...
 03474   404   NtContinue  (1244288, 0, ...
 03475   404   NtContinue  (1244288, 0, ...
 03476   404   NtContinue  (1244288, 0, ...
 03477   404   NtContinue  (1244288, 0, ...
 03478   404   NtContinue  (1244288, 0, ...
 03479   404   NtContinue  (1244288, 0, ...
 03480   404   NtContinue  (1244288, 0, ...
 03481   404   NtContinue  (1244288, 0, ...
 03482   404   NtContinue  (1244288, 0, ...
 03483   404   NtContinue  (1244288, 0, ...
 03484   404   NtContinue  (1244288, 0, ...
 03485   404   NtContinue  (1244288, 0, ...
 03486   404   NtContinue  (1244288, 0, ...
 03487   404   NtContinue  (1244288, 0, ...
 03488   404   NtContinue  (1244288, 0, ...
 03489   404   NtContinue  (1244288, 0, ...
 03490   404   NtContinue  (1244288, 0, ...
 03491   404   NtContinue  (1244288, 0, ...
 03492   404   NtContinue  (1244288, 0, ...
 03493   404   NtContinue  (1244288, 0, ...
 03494   404   NtContinue  (1244288, 0, ...
 03495   404   NtContinue  (1244288, 0, ...
 03496   404   NtContinue  (1244288, 0, ...
 03497   404   NtContinue  (1244288, 0, ...
 03498   404   NtContinue  (1244288, 0, ...
 03499   404   NtContinue  (1244288, 0, ...
 03500   404   NtContinue  (1244288, 0, ...
 03501   404   NtContinue  (1244288, 0, ...
 03502   404   NtContinue  (1244288, 0, ...
 03503   404   NtContinue  (1244288, 0, ...
 03504   404   NtContinue  (1244288, 0, ...
 03505   404   NtContinue  (1244288, 0, ...
 03506   404   NtContinue  (1244288, 0, ...
 03507   404   NtContinue  (1244288, 0, ...
 03508   404   NtContinue  (1244288, 0, ...
 03509   404   NtContinue  (1244288, 0, ...
 03510   404   NtContinue  (1244288, 0, ...
 03511   404   NtContinue  (1244288, 0, ...
 03512   404   NtContinue  (1244288, 0, ...
 03513   404   NtContinue  (1244288, 0, ...
 03514   404   NtContinue  (1244288, 0, ...
 03515   404   NtContinue  (1244288, 0, ...
 03516   404   NtContinue  (1244288, 0, ...
 03517   404   NtContinue  (1244288, 0, ...
 03518   404   NtContinue  (1244288, 0, ...
 03519   404   NtContinue  (1244288, 0, ...
 03520   404   NtContinue  (1244288, 0, ...
 03521   404   NtContinue  (1244288, 0, ...
 03522   404   NtContinue  (1244288, 0, ...
 03523   404   NtContinue  (1244288, 0, ...
 03524   404   NtContinue  (1244288, 0, ...
 03525   404   NtContinue  (1244288, 0, ...
 03526   404   NtContinue  (1244288, 0, ...
 03527   404   NtContinue  (1244288, 0, ...
 03528   404   NtContinue  (1244288, 0, ...
 03529   404   NtContinue  (1244288, 0, ...
 03530   404   NtContinue  (1244288, 0, ...
 03531   404   NtContinue  (1244288, 0, ...
 03532   404   NtContinue  (1244288, 0, ...
 03533   404   NtContinue  (1244288, 0, ...
 03534   404   NtContinue  (1244288, 0, ...
 03535   404   NtContinue  (1244288, 0, ...
 03536   404   NtContinue  (1244288, 0, ...
 03537   404   NtContinue  (1244288, 0, ...
 03538   404   NtContinue  (1244288, 0, ...
 03539   404   NtContinue  (1244288, 0, ...
 03540   404   NtContinue  (1244288, 0, ...
 03541   404   NtContinue  (1244288, 0, ...
 03542   404   NtContinue  (1244288, 0, ...
 03543   404   NtContinue  (1244288, 0, ...
 03544   404   NtContinue  (1244288, 0, ...
 03545   404   NtContinue  (1244288, 0, ...
 03546   404   NtContinue  (1244288, 0, ...
 03547   404   NtContinue  (1244288, 0, ...
 03548   404   NtContinue  (1244288, 0, ...
 03549   404   NtContinue  (1244288, 0, ...
 03550   404   NtContinue  (1244288, 0, ...
 03551   404   NtContinue  (1244288, 0, ...
 03552   404   NtContinue  (1244288, 0, ...
 03553   404   NtContinue  (1244288, 0, ...
 03554   404   NtContinue  (1244288, 0, ...
 03555   404   NtContinue  (1244288, 0, ...
 03556   404   NtContinue  (1244288, 0, ...
 03557   404   NtContinue  (1244288, 0, ...
 03558   404   NtContinue  (1244288, 0, ...
 03559   404   NtContinue  (1244288, 0, ...
 03560   404   NtContinue  (1244288, 0, ...
 03561   404   NtContinue  (1244288, 0, ...
 03562   404   NtContinue  (1244288, 0, ...
 03563   404   NtContinue  (1244288, 0, ...
 03564   404   NtContinue  (1244288, 0, ...
 03565   404   NtContinue  (1244288, 0, ...
 03566   404   NtContinue  (1244288, 0, ...
 03567   404   NtContinue  (1244288, 0, ...
 03568   404   NtContinue  (1244288, 0, ...
 03569   404   NtContinue  (1244288, 0, ...
 03570   404   NtContinue  (1244288, 0, ...
 03571   404   NtContinue  (1244288, 0, ...
 03572   404   NtContinue  (1244288, 0, ...
 03573   404   NtContinue  (1244288, 0, ...
 03574   404   NtContinue  (1244288, 0, ...
 03575   404   NtContinue  (1244288, 0, ...
 03576   404   NtContinue  (1244288, 0, ...
 03577   404   NtContinue  (1244288, 0, ...
 03578   404   NtContinue  (1244288, 0, ...
 03579   404   NtContinue  (1244288, 0, ...
 03580   404   NtContinue  (1244288, 0, ...
 03581   404   NtContinue  (1244288, 0, ...
 03582   404   NtContinue  (1244288, 0, ...
 03583   404   NtContinue  (1244288, 0, ...
 03584   404   NtContinue  (1244288, 0, ...
 03585   404   NtContinue  (1244288, 0, ...
 03586   404   NtContinue  (1244288, 0, ...
 03587   404   NtContinue  (1244288, 0, ...
 03588   404   NtContinue  (1244288, 0, ...
 03589   404   NtContinue  (1244288, 0, ...
 03590   404   NtContinue  (1244288, 0, ...
 03591   404   NtContinue  (1244288, 0, ...
 03592   404   NtContinue  (1244288, 0, ...
 03593   404   NtContinue  (1244288, 0, ...
 03594   404   NtContinue  (1244288, 0, ...
 03595   404   NtContinue  (1244288, 0, ...
 03596   404   NtContinue  (1244288, 0, ...
 03597   404   NtContinue  (1244288, 0, ...
 03598   404   NtContinue  (1244288, 0, ...
 03599   404   NtContinue  (1244288, 0, ...
 03600   404   NtContinue  (1244288, 0, ...
 03601   404   NtContinue  (1244288, 0, ...
 03602   404   NtContinue  (1244288, 0, ...
 03603   404   NtContinue  (1244288, 0, ...
 03604   404   NtContinue  (1244288, 0, ...
 03605   404   NtContinue  (1244288, 0, ...
 03606   404   NtContinue  (1244288, 0, ...
 03607   404   NtContinue  (1244288, 0, ...
 03608   404   NtContinue  (1244288, 0, ...
 03609   404   NtContinue  (1244288, 0, ...
 03610   404   NtContinue  (1244288, 0, ...
 03611   404   NtContinue  (1244288, 0, ...
 03612   404   NtContinue  (1244288, 0, ...
 03613   404   NtContinue  (1244288, 0, ...
 03614   404   NtContinue  (1244288, 0, ...
 03615   404   NtContinue  (1244288, 0, ...
 03616   404   NtContinue  (1244288, 0, ...
 03617   404   NtContinue  (1244288, 0, ...
 03618   404   NtContinue  (1244288, 0, ...
 03619   404   NtContinue  (1244288, 0, ...
 03620   404   NtContinue  (1244288, 0, ...
 03621   404   NtContinue  (1244288, 0, ...
 03622   404   NtContinue  (1244288, 0, ...
 03623   404   NtContinue  (1244288, 0, ...
 03624   404   NtContinue  (1244288, 0, ...
 03625   404   NtContinue  (1244288, 0, ...
 03626   404   NtContinue  (1244288, 0, ...
 03627   404   NtContinue  (1244288, 0, ...
 03628   404   NtContinue  (1244288, 0, ...
 03629   404   NtContinue  (1244288, 0, ...
 03630   404   NtContinue  (1244288, 0, ...
 03631   404   NtContinue  (1244288, 0, ...
 03632   404   NtContinue  (1244288, 0, ...
 03633   404   NtContinue  (1244288, 0, ...
 03634   404   NtContinue  (1244288, 0, ...
 03635   404   NtContinue  (1244288, 0, ...
 03636   404   NtContinue  (1244288, 0, ...
 03637   404   NtContinue  (1244288, 0, ...
 03638   404   NtContinue  (1244288, 0, ...
 03639   404   NtContinue  (1244288, 0, ...
 03640   404   NtContinue  (1244288, 0, ...
 03641   404   NtContinue  (1244288, 0, ...
 03642   404   NtContinue  (1244288, 0, ...
 03643   404   NtContinue  (1244288, 0, ...
 03644   404   NtContinue  (1244288, 0, ...
 03645   404   NtContinue  (1244288, 0, ...
 03646   404   NtContinue  (1244288, 0, ...
 03647   404   NtContinue  (1244288, 0, ...
 03648   404   NtContinue  (1244288, 0, ...
 03649   404   NtContinue  (1244288, 0, ...
 03650   404   NtContinue  (1244288, 0, ...
 03651   404   NtContinue  (1244288, 0, ...
 03652   404   NtContinue  (1244288, 0, ...
 03653   404   NtContinue  (1244288, 0, ...
 03654   404   NtContinue  (1244288, 0, ...
 03655   404   NtContinue  (1244288, 0, ...
 03656   404   NtContinue  (1244288, 0, ...
 03657   404   NtContinue  (1244288, 0, ...
 03658   404   NtContinue  (1244288, 0, ...
 03659   404   NtContinue  (1244288, 0, ...
 03660   404   NtContinue  (1244288, 0, ...
 03661   404   NtContinue  (1244288, 0, ...
 03662   404   NtContinue  (1244288, 0, ...
 03663   404   NtContinue  (1244288, 0, ...
 03664   404   NtContinue  (1244288, 0, ...
 03665   404   NtContinue  (1244288, 0, ...
 03666   404   NtContinue  (1244288, 0, ...
 03667   404   NtContinue  (1244288, 0, ...
 03668   404   NtContinue  (1244288, 0, ...
 03669   404   NtContinue  (1244288, 0, ...
 03670   404   NtContinue  (1244288, 0, ...
 03671   404   NtContinue  (1244288, 0, ...
 03672   404   NtContinue  (1244288, 0, ...
 03673   404   NtContinue  (1244288, 0, ...
 03674   404   NtContinue  (1244288, 0, ...
 03675   404   NtContinue  (1244288, 0, ...
 03676   404   NtContinue  (1244288, 0, ...
 03677   404   NtContinue  (1244288, 0, ...
 03678   404   NtContinue  (1244288, 0, ...
 03679   404   NtContinue  (1244288, 0, ...
 03680   404   NtContinue  (1244288, 0, ...
 03681   404   NtContinue  (1244288, 0, ...
 03682   404   NtContinue  (1244288, 0, ...
 03683   404   NtContinue  (1244288, 0, ...
 03684   404   NtContinue  (1244288, 0, ...
 03685   404   NtContinue  (1244288, 0, ...
 03686   404   NtContinue  (1244288, 0, ...
 03687   404   NtContinue  (1244288, 0, ...
 03688   404   NtContinue  (1244288, 0, ...
 03689   404   NtContinue  (1244288, 0, ...
 03690   404   NtContinue  (1244288, 0, ...
 03691   404   NtContinue  (1244288, 0, ...
 03692   404   NtContinue  (1244288, 0, ...
 03693   404   NtContinue  (1244288, 0, ...
 03694   404   NtContinue  (1244288, 0, ...
 03695   404   NtContinue  (1244288, 0, ...
 03696   404   NtContinue  (1244288, 0, ...
 03697   404   NtContinue  (1244288, 0, ...
 03698   404   NtContinue  (1244288, 0, ...
 03699   404   NtContinue  (1244288, 0, ...
 03700   404   NtContinue  (1244288, 0, ...
 03701   404   NtContinue  (1244288, 0, ...
 03702   404   NtContinue  (1244288, 0, ...
 03703   404   NtContinue  (1244288, 0, ...
 03704   404   NtContinue  (1244288, 0, ...
 03705   404   NtContinue  (1244288, 0, ...
 03706   404   NtContinue  (1244288, 0, ...
 03707   404   NtContinue  (1244288, 0, ...
 03708   404   NtContinue  (1244288, 0, ...
 03709   404   NtContinue  (1244288, 0, ...
 03710   404   NtContinue  (1244288, 0, ...
 03711   404   NtContinue  (1244288, 0, ...
 03712   404   NtContinue  (1244288, 0, ...
 03713   404   NtContinue  (1244288, 0, ...
 03714   404   NtContinue  (1244288, 0, ...
 03715   404   NtContinue  (1244288, 0, ...
 03716   404   NtContinue  (1244288, 0, ...
 03717   404   NtContinue  (1244288, 0, ...
 03718   404   NtContinue  (1244288, 0, ...
 03719   404   NtContinue  (1244288, 0, ...
 03720   404   NtContinue  (1244288, 0, ...
 03721   404   NtContinue  (1244288, 0, ...
 03722   404   NtContinue  (1244288, 0, ...
 03723   404   NtContinue  (1244288, 0, ...
 03724   404   NtContinue  (1244288, 0, ...
 03725   404   NtContinue  (1244288, 0, ...
 03726   404   NtContinue  (1244288, 0, ...
 03727   404   NtContinue  (1244288, 0, ...
 03728   404   NtContinue  (1244288, 0, ...
 03729   404   NtContinue  (1244288, 0, ...
 03730   404   NtContinue  (1244288, 0, ...
 03731   404   NtContinue  (1244288, 0, ...
 03732   404   NtContinue  (1244288, 0, ...
 03733   404   NtContinue  (1244288, 0, ...
 03734   404   NtContinue  (1244288, 0, ...
 03735   404   NtContinue  (1244288, 0, ...
 03736   404   NtContinue  (1244288, 0, ...
 03737   404   NtContinue  (1244288, 0, ...
 03738   404   NtContinue  (1244288, 0, ...
 03739   404   NtContinue  (1244288, 0, ...
 03740   404   NtContinue  (1244288, 0, ...
 03741   404   NtContinue  (1244288, 0, ...
 03742   404   NtContinue  (1244288, 0, ...
 03743   404   NtContinue  (1244288, 0, ...
 03744   404   NtContinue  (1244288, 0, ...
 03745   404   NtContinue  (1244288, 0, ...
 03746   404   NtContinue  (1244288, 0, ...
 03747   404   NtContinue  (1244288, 0, ...
 03748   404   NtContinue  (1244288, 0, ...
 03749   404   NtContinue  (1244288, 0, ...
 03750   404   NtContinue  (1244288, 0, ...
 03751   404   NtContinue  (1244288, 0, ...
 03752   404   NtContinue  (1244288, 0, ...
 03753   404   NtContinue  (1244288, 0, ...
 03754   404   NtContinue  (1244288, 0, ...
 03755   404   NtContinue  (1244288, 0, ...
 03756   404   NtContinue  (1244288, 0, ...
 03757   404   NtContinue  (1244288, 0, ...
 03758   404   NtContinue  (1244288, 0, ...
 03759   404   NtContinue  (1244288, 0, ...
 03760   404   NtContinue  (1244288, 0, ...
 03761   404   NtContinue  (1244288, 0, ...
 03762   404   NtContinue  (1244288, 0, ...
 03763   404   NtContinue  (1244288, 0, ...
 03764   404   NtContinue  (1244288, 0, ...
 03765   404   NtContinue  (1244288, 0, ...
 03766   404   NtContinue  (1244288, 0, ...
 03767   404   NtContinue  (1244288, 0, ...
 03768   404   NtContinue  (1244288, 0, ...
 03769   404   NtContinue  (1244288, 0, ...
 03770   404   NtContinue  (1244288, 0, ...
 03771   404   NtContinue  (1244288, 0, ...
 03772   404   NtContinue  (1244288, 0, ...
 03773   404   NtContinue  (1244288, 0, ...
 03774   404   NtContinue  (1244288, 0, ...
 03775   404   NtContinue  (1244288, 0, ...
 03776   404   NtContinue  (1244288, 0, ...
 03777   404   NtContinue  (1244288, 0, ...
 03778   404   NtContinue  (1244288, 0, ...
 03779   404   NtContinue  (1244288, 0, ...
 03780   404   NtContinue  (1244288, 0, ...
 03781   404   NtContinue  (1244288, 0, ...
 03782   404   NtContinue  (1244288, 0, ...
 03783   404   NtContinue  (1244288, 0, ...
 03784   404   NtContinue  (1244288, 0, ...
 03785   404   NtContinue  (1244288, 0, ...
 03786   404   NtContinue  (1244288, 0, ...
 03787   404   NtContinue  (1244288, 0, ...
 03788   404   NtContinue  (1244288, 0, ...
 03789   404   NtContinue  (1244288, 0, ...
 03790   404   NtContinue  (1244288, 0, ...
 03791   404   NtContinue  (1244288, 0, ...
 03792   404   NtContinue  (1244288, 0, ...
 03793   404   NtContinue  (1244288, 0, ...
 03794   404   NtContinue  (1244288, 0, ...
 03795   404   NtContinue  (1244288, 0, ...
 03796   404   NtContinue  (1244288, 0, ...
 03797   404   NtContinue  (1244288, 0, ...
 03798   404   NtContinue  (1244288, 0, ...
 03799   404   NtContinue  (1244288, 0, ...
 03800   404   NtContinue  (1244288, 0, ...
 03801   404   NtContinue  (1244288, 0, ...
 03802   404   NtContinue  (1244288, 0, ...
 03803   404   NtContinue  (1244288, 0, ...
 03804   404   NtContinue  (1244288, 0, ...
 03805   404   NtContinue  (1244288, 0, ...
 03806   404   NtContinue  (1244288, 0, ...
 03807   404   NtContinue  (1244288, 0, ...
 03808   404   NtContinue  (1244288, 0, ...
 03809   404   NtContinue  (1244288, 0, ...
 03810   404   NtContinue  (1244288, 0, ...
 03811   404   NtContinue  (1244288, 0, ...
 03812   404   NtContinue  (1244288, 0, ...
 03813   404   NtContinue  (1244288, 0, ...
 03814   404   NtContinue  (1244288, 0, ...
 03815   404   NtContinue  (1244288, 0, ...
 03816   404   NtContinue  (1244288, 0, ...
 03817   404   NtContinue  (1244288, 0, ...
 03818   404   NtContinue  (1244288, 0, ...
 03819   404   NtContinue  (1244288, 0, ...
 03820   404   NtContinue  (1244288, 0, ...
 03821   404   NtContinue  (1244288, 0, ...
 03822   404   NtContinue  (1244288, 0, ...
 03823   404   NtContinue  (1244288, 0, ...
 03824   404   NtContinue  (1244288, 0, ...
 03825   404   NtContinue  (1244288, 0, ...
 03826   404   NtContinue  (1244288, 0, ...
 03827   404   NtContinue  (1244288, 0, ...
 03828   404   NtContinue  (1244288, 0, ...
 03829   404   NtContinue  (1244288, 0, ...
 03830   404   NtContinue  (1244288, 0, ...
 03831   404   NtContinue  (1244288, 0, ...
 03832   404   NtContinue  (1244288, 0, ...
 03833   404   NtContinue  (1244288, 0, ...
 03834   404   NtContinue  (1244288, 0, ...
 03835   404   NtContinue  (1244288, 0, ...
 03836   404   NtContinue  (1244288, 0, ...
 03837   404   NtContinue  (1244288, 0, ...
 03838   404   NtContinue  (1244288, 0, ...
 03839   404   NtContinue  (1244288, 0, ...
 03840   404   NtContinue  (1244288, 0, ...
 03841   404   NtContinue  (1244288, 0, ...
 03842   404   NtContinue  (1244288, 0, ...
 03843   404   NtContinue  (1244288, 0, ...
 03844   404   NtContinue  (1244288, 0, ...
 03845   404   NtContinue  (1244288, 0, ...
 03846   404   NtContinue  (1244288, 0, ...
 03847   404   NtContinue  (1244288, 0, ...
 03848   404   NtContinue  (1244288, 0, ...
 03849   404   NtContinue  (1244288, 0, ...
 03850   404   NtContinue  (1244288, 0, ...
 03851   404   NtContinue  (1244288, 0, ...
 03852   404   NtContinue  (1244288, 0, ...
 03853   404   NtContinue  (1244288, 0, ...
 03854   404   NtContinue  (1244288, 0, ...
 03855   404   NtContinue  (1244288, 0, ...
 03856   404   NtContinue  (1244288, 0, ...
 03857   404   NtContinue  (1244288, 0, ...
 03858   404   NtContinue  (1244288, 0, ...
 03859   404   NtContinue  (1244288, 0, ...
 03860   404   NtContinue  (1244288, 0, ...
 03861   404   NtContinue  (1244288, 0, ...
 03862   404   NtContinue  (1244288, 0, ...
 03863   404   NtContinue  (1244288, 0, ...
 03864   404   NtContinue  (1244288, 0, ...
 03865   404   NtContinue  (1244288, 0, ...
 03866   404   NtContinue  (1244288, 0, ...
 03867   404   NtContinue  (1244288, 0, ...
 03868   404   NtContinue  (1244288, 0, ...
 03869   404   NtContinue  (1244288, 0, ...
 03870   404   NtContinue  (1244288, 0, ...
 03871   404   NtContinue  (1244288, 0, ...
 03872   404   NtContinue  (1244288, 0, ...
 03873   404   NtContinue  (1244288, 0, ...
 03874   404   NtContinue  (1244288, 0, ...
 03875   404   NtContinue  (1244288, 0, ...
 03876   404   NtContinue  (1244288, 0, ...
 03877   404   NtContinue  (1244288, 0, ...
 03878   404   NtContinue  (1244288, 0, ...
 03879   404   NtContinue  (1244288, 0, ...
 03880   404   NtContinue  (1244288, 0, ...
 03881   404   NtContinue  (1244288, 0, ...
 03882   404   NtContinue  (1244288, 0, ...
 03883   404   NtContinue  (1244288, 0, ...
 03884   404   NtContinue  (1244288, 0, ...
 03885   404   NtContinue  (1244288, 0, ...
 03886   404   NtContinue  (1244288, 0, ...
 03887   404   NtContinue  (1244288, 0, ...
 03888   404   NtContinue  (1244288, 0, ...
 03889   404   NtContinue  (1244288, 0, ...
 03890   404   NtContinue  (1244288, 0, ...
 03891   404   NtContinue  (1244288, 0, ...
 03892   404   NtContinue  (1244288, 0, ...
 03893   404   NtContinue  (1244288, 0, ...
 03894   404   NtContinue  (1244288, 0, ...
 03895   404   NtContinue  (1244288, 0, ...
 03896   404   NtContinue  (1244288, 0, ...
 03897   404   NtContinue  (1244288, 0, ...
 03898   404   NtContinue  (1244288, 0, ...
 03899   404   NtContinue  (1244288, 0, ...
 03900   404   NtContinue  (1244288, 0, ...
 03901   404   NtContinue  (1244288, 0, ...
 03902   404   NtContinue  (1244288, 0, ...
 03903   404   NtContinue  (1244288, 0, ...
 03904   404   NtContinue  (1244288, 0, ...
 03905   404   NtContinue  (1244288, 0, ...
 03906   404   NtContinue  (1244288, 0, ...
 03907   404   NtContinue  (1244288, 0, ...
 03908   404   NtContinue  (1244288, 0, ...
 03909   404   NtContinue  (1244288, 0, ...
 03910   404   NtContinue  (1244288, 0, ...
 03911   404   NtContinue  (1244288, 0, ...
 03912   404   NtContinue  (1244288, 0, ...
 03913   404   NtContinue  (1244288, 0, ...
 03914   404   NtContinue  (1244288, 0, ...
 03915   404   NtContinue  (1244288, 0, ...
 03916   404   NtContinue  (1244288, 0, ...
 03917   404   NtContinue  (1244288, 0, ...
 03918   404   NtContinue  (1244288, 0, ...
 03919   404   NtContinue  (1244288, 0, ...
 03920   404   NtContinue  (1244288, 0, ...
 03921   404   NtContinue  (1244288, 0, ...
 03922   404   NtContinue  (1244288, 0, ...
 03923   404   NtContinue  (1244288, 0, ...
 03924   404   NtContinue  (1244288, 0, ...
 03925   404   NtContinue  (1244288, 0, ...
 03926   404   NtContinue  (1244288, 0, ...
 03927   404   NtContinue  (1244288, 0, ...
 03928   404   NtContinue  (1244288, 0, ...
 03929   404   NtContinue  (1244288, 0, ...
 03930   404   NtContinue  (1244288, 0, ...
 03931   404   NtContinue  (1244288, 0, ...
 03932   404   NtContinue  (1244288, 0, ...
 03933   404   NtContinue  (1244288, 0, ...
 03934   404   NtContinue  (1244288, 0, ...
 03935   404   NtContinue  (1244288, 0, ...
 03936   404   NtContinue  (1244288, 0, ...
 03937   404   NtContinue  (1244288, 0, ...
 03938   404   NtContinue  (1244288, 0, ...
 03939   404   NtContinue  (1244288, 0, ...
 03940   404   NtContinue  (1244288, 0, ...
 03941   404   NtContinue  (1244288, 0, ...
 03942   404   NtContinue  (1244288, 0, ...
 03943   404   NtContinue  (1244288, 0, ...
 03944   404   NtContinue  (1244288, 0, ...
 03945   404   NtContinue  (1244288, 0, ...
 03946   404   NtContinue  (1244288, 0, ...
 03947   404   NtContinue  (1244288, 0, ...
 03948   404   NtContinue  (1244288, 0, ...
 03949   404   NtContinue  (1244288, 0, ...
 03950   404   NtContinue  (1244288, 0, ...
 03951   404   NtContinue  (1244288, 0, ...
 03952   404   NtContinue  (1244288, 0, ...
 03953   404   NtContinue  (1244288, 0, ...
 03954   404   NtContinue  (1244288, 0, ...
 03955   404   NtContinue  (1244288, 0, ...
 03956   404   NtContinue  (1244288, 0, ...
 03957   404   NtContinue  (1244288, 0, ...
 03958   404   NtContinue  (1244288, 0, ...
 03959   404   NtContinue  (1244288, 0, ...
 03960   404   NtContinue  (1244288, 0, ...
 03961   404   NtContinue  (1244288, 0, ...
 03962   404   NtContinue  (1244288, 0, ...
 03963   404   NtContinue  (1244288, 0, ...
 03964   404   NtContinue  (1244288, 0, ...
 03965   404   NtContinue  (1244288, 0, ...
 03966   404   NtContinue  (1244288, 0, ...
 03967   404   NtContinue  (1244288, 0, ...
 03968   404   NtContinue  (1244288, 0, ...
 03969   404   NtContinue  (1244288, 0, ...
 03970   404   NtContinue  (1244288, 0, ...
 03971   404   NtContinue  (1244288, 0, ...
 03972   404   NtContinue  (1244288, 0, ...
 03973   404   NtContinue  (1244288, 0, ...
 03974   404   NtContinue  (1244288, 0, ...
 03975   404   NtContinue  (1244288, 0, ...
 03976   404   NtContinue  (1244288, 0, ...
 03977   404   NtContinue  (1244288, 0, ...
 03978   404   NtContinue  (1244288, 0, ...
 03979   404   NtContinue  (1244288, 0, ...
 03980   404   NtContinue  (1244288, 0, ...
 03981   404   NtContinue  (1244288, 0, ...
 03982   404   NtContinue  (1244288, 0, ...
 03983   404   NtContinue  (1244288, 0, ...
 03984   404   NtContinue  (1244288, 0, ...
 03985   404   NtContinue  (1244288, 0, ...
 03986   404   NtContinue  (1244288, 0, ...
 03987   404   NtContinue  (1244288, 0, ...
 03988   404   NtContinue  (1244288, 0, ...
 03989   404   NtContinue  (1244288, 0, ...
 03990   404   NtContinue  (1244288, 0, ...
 03991   404   NtContinue  (1244288, 0, ...
 03992   404   NtContinue  (1244288, 0, ...
 03993   404   NtContinue  (1244288, 0, ...
 03994   404   NtContinue  (1244288, 0, ...
 03995   404   NtContinue  (1244288, 0, ...
 03996   404   NtContinue  (1244288, 0, ...
 03997   404   NtContinue  (1244288, 0, ...
 03998   404   NtContinue  (1244288, 0, ...
 03999   404   NtContinue  (1244288, 0, ...
 04000   404   NtContinue  (1244288, 0, ...
 04001   404   NtContinue  (1244288, 0, ...
 04002   404   NtContinue  (1244288, 0, ...
 04003   404   NtContinue  (1244288, 0, ...
 04004   404   NtContinue  (1244288, 0, ...
 04005   404   NtContinue  (1244288, 0, ...
 04006   404   NtContinue  (1244288, 0, ...
 04007   404   NtContinue  (1244288, 0, ...
 04008   404   NtContinue  (1244288, 0, ...
 04009   404   NtContinue  (1244288, 0, ...
 04010   404   NtContinue  (1244288, 0, ...
 04011   404   NtContinue  (1244288, 0, ...
 04012   404   NtContinue  (1244288, 0, ...
 04013   404   NtContinue  (1244288, 0, ...
 04014   404   NtContinue  (1244288, 0, ...
 04015   404   NtContinue  (1244288, 0, ...
 04016   404   NtContinue  (1244288, 0, ...
 04017   404   NtContinue  (1244288, 0, ...
 04018   404   NtContinue  (1244288, 0, ...
 04019   404   NtContinue  (1244288, 0, ...
 04020   404   NtContinue  (1244288, 0, ...
 04021   404   NtContinue  (1244288, 0, ...
 04022   404   NtContinue  (1244288, 0, ...
 04023   404   NtContinue  (1244288, 0, ...
 04024   404   NtContinue  (1244288, 0, ...
 04025   404   NtContinue  (1244288, 0, ...
 04026   404   NtContinue  (1244288, 0, ...
 04027   404   NtContinue  (1244288, 0, ...
 04028   404   NtContinue  (1244288, 0, ...
 04029   404   NtContinue  (1244288, 0, ...
 04030   404   NtContinue  (1244288, 0, ...
 04031   404   NtContinue  (1244288, 0, ...
 04032   404   NtContinue  (1244288, 0, ...
 04033   404   NtContinue  (1244288, 0, ...
 04034   404   NtContinue  (1244288, 0, ...
 04035   404   NtContinue  (1244288, 0, ...
 04036   404   NtContinue  (1244288, 0, ...
 04037   404   NtContinue  (1244288, 0, ...
 04038   404   NtContinue  (1244288, 0, ...
 04039   404   NtContinue  (1244288, 0, ...
 04040   404   NtContinue  (1244288, 0, ...
 04041   404   NtContinue  (1244288, 0, ...
 04042   404   NtContinue  (1244288, 0, ...
 04043   404   NtContinue  (1244288, 0, ...
 04044   404   NtContinue  (1244288, 0, ...
 04045   404   NtContinue  (1244288, 0, ...
 04046   404   NtContinue  (1244288, 0, ...
 04047   404   NtContinue  (1244288, 0, ...
 04048   404   NtContinue  (1244288, 0, ...
 04049   404   NtContinue  (1244288, 0, ...
 04050   404   NtContinue  (1244288, 0, ...
 04051   404   NtContinue  (1244288, 0, ...
 04052   404   NtContinue  (1244288, 0, ...
 04053   404   NtContinue  (1244288, 0, ...
 04054   404   NtContinue  (1244288, 0, ...
 04055   404   NtContinue  (1244288, 0, ...
 04056   404   NtContinue  (1244288, 0, ...
 04057   404   NtContinue  (1244288, 0, ...
 04058   404   NtContinue  (1244288, 0, ...
 04059   404   NtContinue  (1244288, 0, ...
 04060   404   NtContinue  (1244288, 0, ...
 04061   404   NtContinue  (1244288, 0, ...
 04062   404   NtContinue  (1244288, 0, ...
 04063   404   NtContinue  (1244288, 0, ...
 04064   404   NtContinue  (1244288, 0, ...
 04065   404   NtContinue  (1244288, 0, ...
 04066   404   NtContinue  (1244288, 0, ...
 04067   404   NtContinue  (1244288, 0, ...
 04068   404   NtContinue  (1244288, 0, ...
 04069   404   NtContinue  (1244288, 0, ...
 04070   404   NtContinue  (1244288, 0, ...
 04071   404   NtContinue  (1244288, 0, ...
 04072   404   NtContinue  (1244288, 0, ...
 04073   404   NtContinue  (1244288, 0, ...
 04074   404   NtContinue  (1244288, 0, ...
 04075   404   NtContinue  (1244288, 0, ...
 04076   404   NtContinue  (1244288, 0, ...
 04077   404   NtContinue  (1244288, 0, ...
 04078   404   NtContinue  (1244288, 0, ...
 04079   404   NtContinue  (1244288, 0, ...
 04080   404   NtContinue  (1244288, 0, ...
 04081   404   NtContinue  (1244288, 0, ...
 04082   404   NtContinue  (1244288, 0, ...
 04083   404   NtContinue  (1244288, 0, ...
 04084   404   NtContinue  (1244288, 0, ...
 04085   404   NtContinue  (1244288, 0, ...
 04086   404   NtContinue  (1244288, 0, ...
 04087   404   NtContinue  (1244288, 0, ...
 04088   404   NtContinue  (1244288, 0, ...
 04089   404   NtContinue  (1244288, 0, ...
 04090   404   NtContinue  (1244288, 0, ...
 04091   404   NtContinue  (1244288, 0, ...
 04092   404   NtContinue  (1244288, 0, ...
 04093   404   NtContinue  (1244288, 0, ...
 04094   404   NtContinue  (1244288, 0, ...
 04095   404   NtContinue  (1244288, 0, ...
 04096   404   NtContinue  (1244288, 0, ...
 04097   404   NtContinue  (1244288, 0, ...
 04098   404   NtContinue  (1244288, 0, ...
 04099   404   NtContinue  (1244288, 0, ...
 04100   404   NtContinue  (1244288, 0, ...
 04101   404   NtContinue  (1244288, 0, ...
 04102   404   NtContinue  (1244288, 0, ...
 04103   404   NtContinue  (1244288, 0, ...
 04104   404   NtContinue  (1244288, 0, ...
 04105   404   NtContinue  (1244288, 0, ...
 04106   404   NtContinue  (1244288, 0, ...
 04107   404   NtContinue  (1244288, 0, ...
 04108   404   NtContinue  (1244288, 0, ...
 04109   404   NtContinue  (1244288, 0, ...
 04110   404   NtContinue  (1244288, 0, ...
 04111   404   NtContinue  (1244288, 0, ...
 04112   404   NtContinue  (1244288, 0, ...
 04113   404   NtContinue  (1244288, 0, ...
 04114   404   NtContinue  (1244288, 0, ...
 04115   404   NtContinue  (1244288, 0, ...
 04116   404   NtContinue  (1244288, 0, ...
 04117   404   NtContinue  (1244288, 0, ...
 04118   404   NtContinue  (1244288, 0, ...
 04119   404   NtContinue  (1244288, 0, ...
 04120   404   NtContinue  (1244288, 0, ...
 04121   404   NtContinue  (1244288, 0, ...
 04122   404   NtContinue  (1244288, 0, ...
 04123   404   NtContinue  (1244288, 0, ...
 04124   404   NtContinue  (1244288, 0, ...
 04125   404   NtContinue  (1244288, 0, ...
 04126   404   NtContinue  (1244288, 0, ...
 04127   404   NtContinue  (1244288, 0, ...
 04128   404   NtContinue  (1244288, 0, ...
 04129   404   NtContinue  (1244288, 0, ...
 04130   404   NtContinue  (1244288, 0, ...
 04131   404   NtContinue  (1244288, 0, ...
 04132   404   NtContinue  (1244288, 0, ...
 04133   404   NtContinue  (1244288, 0, ...
 04134   404   NtContinue  (1244288, 0, ...
 04135   404   NtContinue  (1244288, 0, ...
 04136   404   NtContinue  (1244288, 0, ...
 04137   404   NtContinue  (1244288, 0, ...
 04138   404   NtContinue  (1244288, 0, ...
 04139   404   NtContinue  (1244288, 0, ...
 04140   404   NtContinue  (1244288, 0, ...
 04141   404   NtContinue  (1244288, 0, ...
 04142   404   NtContinue  (1244288, 0, ...
 04143   404   NtContinue  (1244288, 0, ...
 04144   404   NtContinue  (1244288, 0, ...
 04145   404   NtContinue  (1244288, 0, ...
 04146   404   NtContinue  (1244288, 0, ...
 04147   404   NtContinue  (1244288, 0, ...
 04148   404   NtContinue  (1244288, 0, ...
 04149   404   NtContinue  (1244288, 0, ...
 04150   404   NtContinue  (1244288, 0, ...
 04151   404   NtContinue  (1244288, 0, ...
 04152   404   NtContinue  (1244288, 0, ...
 04153   404   NtContinue  (1244288, 0, ...
 04154   404   NtContinue  (1244288, 0, ...
 04155   404   NtContinue  (1244288, 0, ...
 04156   404   NtContinue  (1244288, 0, ...
 04157   404   NtContinue  (1244288, 0, ...
 04158   404   NtContinue  (1244288, 0, ...
 04159   404   NtContinue  (1244288, 0, ...
 04160   404   NtContinue  (1244288, 0, ...
 04161   404   NtContinue  (1244288, 0, ...
 04162   404   NtContinue  (1244288, 0, ...
 04163   404   NtContinue  (1244288, 0, ...
 04164   404   NtContinue  (1244288, 0, ...
 04165   404   NtContinue  (1244288, 0, ...
 04166   404   NtContinue  (1244288, 0, ...
 04167   404   NtContinue  (1244288, 0, ...
 04168   404   NtContinue  (1244288, 0, ...
 04169   404   NtContinue  (1244288, 0, ...
 04170   404   NtContinue  (1244288, 0, ...
 04171   404   NtContinue  (1244288, 0, ...
 04172   404   NtContinue  (1244288, 0, ...
 04173   404   NtContinue  (1244288, 0, ...
 04174   404   NtContinue  (1244288, 0, ...
 04175   404   NtContinue  (1244288, 0, ...
 04176   404   NtContinue  (1244288, 0, ...
 04177   404   NtContinue  (1244288, 0, ...
 04178   404   NtContinue  (1244288, 0, ...
 04179   404   NtContinue  (1244288, 0, ...
 04180   404   NtContinue  (1244288, 0, ...
 04181   404   NtContinue  (1244288, 0, ...
 04182   404   NtContinue  (1244288, 0, ...
 04183   404   NtContinue  (1244288, 0, ...
 04184   404   NtContinue  (1244288, 0, ...
 04185   404   NtContinue  (1244288, 0, ...
 04186   404   NtContinue  (1244288, 0, ...
 04187   404   NtContinue  (1244288, 0, ...
 04188   404   NtContinue  (1244288, 0, ...
 04189   404   NtContinue  (1244288, 0, ...
 04190   404   NtContinue  (1244288, 0, ...
 04191   404   NtContinue  (1244288, 0, ...
 04192   404   NtContinue  (1244288, 0, ...
 04193   404   NtContinue  (1244288, 0, ...
 04194   404   NtContinue  (1244288, 0, ...
 04195   404   NtContinue  (1244288, 0, ...
 04196   404   NtContinue  (1244288, 0, ...
 04197   404   NtContinue  (1244288, 0, ...
 04198   404   NtContinue  (1244288, 0, ...
 04199   404   NtContinue  (1244288, 0, ...
 04200   404   NtContinue  (1244288, 0, ...
 04201   404   NtContinue  (1244288, 0, ...
 04202   404   NtContinue  (1244288, 0, ...
 04203   404   NtContinue  (1244288, 0, ...
 04204   404   NtContinue  (1244288, 0, ...
 04205   404   NtContinue  (1244288, 0, ...
 04206   404   NtContinue  (1244288, 0, ...
 04207   404   NtContinue  (1244288, 0, ...
 04208   404   NtContinue  (1244288, 0, ...
 04209   404   NtContinue  (1244288, 0, ...
 04210   404   NtContinue  (1244288, 0, ...
 04211   404   NtContinue  (1244288, 0, ...
 04212   404   NtContinue  (1244288, 0, ...
 04213   404   NtContinue  (1244288, 0, ...
 04214   404   NtContinue  (1244288, 0, ...
 04215   404   NtContinue  (1244288, 0, ...
 04216   404   NtContinue  (1244288, 0, ...
 04217   404   NtContinue  (1244288, 0, ...
 04218   404   NtContinue  (1244288, 0, ...
 04219   404   NtContinue  (1244288, 0, ...
 04220   404   NtContinue  (1244288, 0, ...
 04221   404   NtContinue  (1244288, 0, ...
 04222   404   NtContinue  (1244288, 0, ...
 04223   404   NtContinue  (1244288, 0, ...
 04224   404   NtContinue  (1244288, 0, ...
 04225   404   NtContinue  (1244288, 0, ...
 04226   404   NtContinue  (1244288, 0, ...
 04227   404   NtContinue  (1244288, 0, ...
 04228   404   NtContinue  (1244288, 0, ...
 04229   404   NtContinue  (1244288, 0, ...
 04230   404   NtContinue  (1244288, 0, ...
 04231   404   NtContinue  (1244288, 0, ...
 04232   404   NtContinue  (1244288, 0, ...
 04233   404   NtContinue  (1244288, 0, ...
 04234   404   NtContinue  (1244288, 0, ...
 04235   404   NtContinue  (1244288, 0, ...
 04236   404   NtContinue  (1244288, 0, ...
 04237   404   NtContinue  (1244288, 0, ...
 04238   404   NtContinue  (1244288, 0, ...
 04239   404   NtContinue  (1244288, 0, ...
 04240   404   NtContinue  (1244288, 0, ...
 04241   404   NtContinue  (1244288, 0, ...
 04242   404   NtContinue  (1244288, 0, ...
 04243   404   NtContinue  (1244288, 0, ...
 04244   404   NtContinue  (1244288, 0, ...
 04245   404   NtContinue  (1244288, 0, ...
 04246   404   NtContinue  (1244288, 0, ...
 04247   404   NtContinue  (1244288, 0, ...
 04248   404   NtContinue  (1244288, 0, ...
 04249   404   NtContinue  (1244288, 0, ...
 04250   404   NtContinue  (1244288, 0, ...
 04251   404   NtContinue  (1244288, 0, ...
 04252   404   NtContinue  (1244288, 0, ...
 04253   404   NtContinue  (1244288, 0, ...
 04254   404   NtContinue  (1244288, 0, ...
 04255   404   NtContinue  (1244288, 0, ...
 04256   404   NtContinue  (1244288, 0, ...
 04257   404   NtContinue  (1244288, 0, ...
 04258   404   NtContinue  (1244288, 0, ...
 04259   404   NtContinue  (1244288, 0, ...
 04260   404   NtContinue  (1244288, 0, ...
 04261   404   NtContinue  (1244288, 0, ...
 04262   404   NtContinue  (1244288, 0, ...
 04263   404   NtContinue  (1244288, 0, ...
 04264   404   NtContinue  (1244288, 0, ...
 04265   404   NtContinue  (1244288, 0, ...
 04266   404   NtContinue  (1244288, 0, ...
 04267   404   NtContinue  (1244288, 0, ...
 04268   404   NtContinue  (1244288, 0, ...
 04269   404   NtContinue  (1244288, 0, ...
 04270   404   NtContinue  (1244288, 0, ...
 04271   404   NtContinue  (1244288, 0, ...
 04272   404   NtContinue  (1244288, 0, ...
 04273   404   NtContinue  (1244288, 0, ...
 04274   404   NtContinue  (1244288, 0, ...
 04275   404   NtContinue  (1244288, 0, ...
 04276   404   NtContinue  (1244288, 0, ...
 04277   404   NtContinue  (1244288, 0, ...
 04278   404   NtContinue  (1244288, 0, ...
 04279   404   NtContinue  (1244288, 0, ...
 04280   404   NtContinue  (1244288, 0, ...
 04281   404   NtContinue  (1244288, 0, ...
 04282   404   NtContinue  (1244288, 0, ...
 04283   404   NtContinue  (1244288, 0, ...
 04284   404   NtContinue  (1244288, 0, ...
 04285   404   NtContinue  (1244288, 0, ...
 04286   404   NtContinue  (1244288, 0, ...
 04287   404   NtContinue  (1244288, 0, ...
 04288   404   NtContinue  (1244288, 0, ...
 04289   404   NtContinue  (1244288, 0, ...
 04290   404   NtContinue  (1244288, 0, ...
 04291   404   NtContinue  (1244288, 0, ...
 04292   404   NtContinue  (1244288, 0, ...
 04293   404   NtContinue  (1244288, 0, ...
 04294   404   NtContinue  (1244288, 0, ...
 04295   404   NtContinue  (1244288, 0, ...
 04296   404   NtContinue  (1244288, 0, ...
 04297   404   NtContinue  (1244288, 0, ...
 04298   404   NtContinue  (1244288, 0, ...
 04299   404   NtContinue  (1244288, 0, ...
 04300   404   NtContinue  (1244288, 0, ...
 04301   404   NtContinue  (1244288, 0, ...
 04302   404   NtContinue  (1244288, 0, ...
 04303   404   NtContinue  (1244288, 0, ...
 04304   404   NtContinue  (1244288, 0, ...
 04305   404   NtContinue  (1244288, 0, ...
 04306   404   NtContinue  (1244288, 0, ...
 04307   404   NtContinue  (1244288, 0, ...
 04308   404   NtContinue  (1244288, 0, ...
 04309   404   NtContinue  (1244288, 0, ...
 04310   404   NtContinue  (1244288, 0, ...
 04311   404   NtContinue  (1244288, 0, ...
 04312   404   NtContinue  (1244288, 0, ...
 04313   404   NtContinue  (1244288, 0, ...
 04314   404   NtContinue  (1244288, 0, ...
 04315   404   NtContinue  (1244288, 0, ...
 04316   404   NtContinue  (1244288, 0, ...
 04317   404   NtContinue  (1244288, 0, ...
 04318   404   NtContinue  (1244288, 0, ...
 04319   404   NtContinue  (1244288, 0, ...
 04320   404   NtContinue  (1244288, 0, ...
 04321   404   NtContinue  (1244288, 0, ...
 04322   404   NtContinue  (1244288, 0, ...
 04323   404   NtContinue  (1244288, 0, ...
 04324   404   NtContinue  (1244288, 0, ...
 04325   404   NtContinue  (1244288, 0, ...
 04326   404   NtContinue  (1244288, 0, ...
 04327   404   NtContinue  (1244288, 0, ...
 04328   404   NtContinue  (1244288, 0, ...
 04329   404   NtContinue  (1244288, 0, ...
 04330   404   NtContinue  (1244288, 0, ...
 04331   404   NtContinue  (1244288, 0, ...
 04332   404   NtContinue  (1244288, 0, ...
 04333   404   NtContinue  (1244288, 0, ...
 04334   404   NtContinue  (1244288, 0, ...
 04335   404   NtContinue  (1244288, 0, ...
 04336   404   NtContinue  (1244288, 0, ...
 04337   404   NtContinue  (1244288, 0, ...
 04338   404   NtContinue  (1244288, 0, ...
 04339   404   NtContinue  (1244288, 0, ...
 04340   404   NtContinue  (1244288, 0, ...
 04341   404   NtContinue  (1244288, 0, ...
 04342   404   NtContinue  (1244288, 0, ...
 04343   404   NtContinue  (1244288, 0, ...
 04344   404   NtContinue  (1244288, 0, ...
 04345   404   NtContinue  (1244288, 0, ...
 04346   404   NtContinue  (1244288, 0, ...
 04347   404   NtContinue  (1244288, 0, ...
 04348   404   NtContinue  (1244288, 0, ...
 04349   404   NtContinue  (1244288, 0, ...
 04350   404   NtContinue  (1244288, 0, ...
 04351   404   NtContinue  (1244288, 0, ...
 04352   404   NtContinue  (1244288, 0, ...
 04353   404   NtContinue  (1244288, 0, ...
 04354   404   NtContinue  (1244288, 0, ...
 04355   404   NtContinue  (1244288, 0, ...
 04356   404   NtContinue  (1244288, 0, ...
 04357   404   NtContinue  (1244288, 0, ...
 04358   404   NtContinue  (1244288, 0, ...
 04359   404   NtContinue  (1244288, 0, ...
 04360   404   NtContinue  (1244288, 0, ...
 04361   404   NtContinue  (1244288, 0, ...
 04362   404   NtContinue  (1244288, 0, ...
 04363   404   NtContinue  (1244288, 0, ...
 04364   404   NtContinue  (1244288, 0, ...
 04365   404   NtContinue  (1244288, 0, ...
 04366   404   NtContinue  (1244288, 0, ...
 04367   404   NtContinue  (1244288, 0, ...
 04368   404   NtContinue  (1244288, 0, ...
 04369   404   NtContinue  (1244288, 0, ...
 04370   404   NtContinue  (1244288, 0, ...
 04371   404   NtContinue  (1244288, 0, ...
 04372   404   NtContinue  (1244288, 0, ...
 04373   404   NtContinue  (1244288, 0, ...
 04374   404   NtContinue  (1244288, 0, ...
 04375   404   NtContinue  (1244288, 0, ...
 04376   404   NtContinue  (1244288, 0, ...
 04377   404   NtContinue  (1244288, 0, ...
 04378   404   NtContinue  (1244288, 0, ...
 04379   404   NtContinue  (1244288, 0, ...
 04380   404   NtContinue  (1244288, 0, ...
 04381   404   NtContinue  (1244288, 0, ...
 04382   404   NtContinue  (1244288, 0, ...
 04383   404   NtContinue  (1244288, 0, ...
 04384   404   NtContinue  (1244288, 0, ...
 04385   404   NtContinue  (1244288, 0, ...
 04386   404   NtContinue  (1244288, 0, ...
 04387   404   NtContinue  (1244288, 0, ...
 04388   404   NtContinue  (1244288, 0, ...
 04389   404   NtContinue  (1244288, 0, ...
 04390   404   NtContinue  (1244288, 0, ...
 04391   404   NtContinue  (1244288, 0, ...
 04392   404   NtContinue  (1244288, 0, ...
 04393   404   NtContinue  (1244288, 0, ...
 04394   404   NtContinue  (1244288, 0, ...
 04395   404   NtContinue  (1244288, 0, ...
 04396   404   NtContinue  (1244288, 0, ...
 04397   404   NtContinue  (1244288, 0, ...
 04398   404   NtContinue  (1244288, 0, ...
 04399   404   NtContinue  (1244288, 0, ...
 04400   404   NtContinue  (1244288, 0, ...
 04401   404   NtContinue  (1244288, 0, ...
 04402   404   NtContinue  (1244288, 0, ...
 04403   404   NtContinue  (1244288, 0, ...
 04404   404   NtContinue  (1244288, 0, ...
 04405   404   NtContinue  (1244288, 0, ...
 04406   404   NtContinue  (1244288, 0, ...
 04407   404   NtContinue  (1244288, 0, ...
 04408   404   NtContinue  (1244288, 0, ...
 04409   404   NtContinue  (1244288, 0, ...
 04410   404   NtContinue  (1244288, 0, ...
 04411   404   NtContinue  (1244288, 0, ...
 04412   404   NtContinue  (1244288, 0, ...
 04413   404   NtContinue  (1244288, 0, ...
 04414   404   NtContinue  (1244288, 0, ...
 04415   404   NtContinue  (1244288, 0, ...
 04416   404   NtContinue  (1244288, 0, ...
 04417   404   NtContinue  (1244288, 0, ...
 04418   404   NtContinue  (1244288, 0, ...
 04419   404   NtContinue  (1244288, 0, ...
 04420   404   NtContinue  (1244288, 0, ...
 04421   404   NtContinue  (1244288, 0, ...
 04422   404   NtContinue  (1244288, 0, ...
 04423   404   NtContinue  (1244288, 0, ...
 04424   404   NtContinue  (1244288, 0, ...
 04425   404   NtContinue  (1244288, 0, ...
 04426   404   NtContinue  (1244288, 0, ...
 04427   404   NtContinue  (1244288, 0, ...
 04428   404   NtContinue  (1244288, 0, ...
 04429   404   NtContinue  (1244288, 0, ...
 04430   404   NtContinue  (1244288, 0, ...
 04431   404   NtContinue  (1244288, 0, ...
 04432   404   NtContinue  (1244288, 0, ...
 04433   404   NtContinue  (1244288, 0, ...
 04434   404   NtContinue  (1244288, 0, ...
 04435   404   NtContinue  (1244288, 0, ...
 04436   404   NtContinue  (1244288, 0, ...
 04437   404   NtContinue  (1244288, 0, ...
 04438   404   NtContinue  (1244288, 0, ...
 04439   404   NtContinue  (1244288, 0, ...
 04440   404   NtContinue  (1244288, 0, ...
 04441   404   NtContinue  (1244288, 0, ...
 04442   404   NtContinue  (1244288, 0, ...
 04443   404   NtContinue  (1244288, 0, ...
 04444   404   NtContinue  (1244288, 0, ...
 04445   404   NtContinue  (1244288, 0, ...
 04446   404   NtContinue  (1244288, 0, ...
 04447   404   NtContinue  (1244288, 0, ...
 04448   404   NtContinue  (1244288, 0, ...
 04449   404   NtContinue  (1244288, 0, ...
 04450   404   NtContinue  (1244288, 0, ...
 04451   404   NtContinue  (1244288, 0, ...
 04452   404   NtContinue  (1244288, 0, ...
 04453   404   NtContinue  (1244288, 0, ...
 04454   404   NtContinue  (1244288, 0, ...
 04455   404   NtContinue  (1244288, 0, ...
 04456   404   NtContinue  (1244288, 0, ...
 04457   404   NtContinue  (1244288, 0, ...
 04458   404   NtContinue  (1244288, 0, ...
 04459   404   NtContinue  (1244288, 0, ...
 04460   404   NtContinue  (1244288, 0, ...
 04461   404   NtContinue  (1244288, 0, ...
 04462   404   NtContinue  (1244288, 0, ...
 04463   404   NtContinue  (1244288, 0, ...
 04464   404   NtContinue  (1244288, 0, ...
 04465   404   NtContinue  (1244288, 0, ...
 04466   404   NtContinue  (1244288, 0, ...
 04467   404   NtContinue  (1244288, 0, ...
 04468   404   NtContinue  (1244288, 0, ...
 04469   404   NtContinue  (1244288, 0, ...
 04470   404   NtContinue  (1244288, 0, ...
 04471   404   NtContinue  (1244288, 0, ...
 04472   404   NtContinue  (1244288, 0, ...
 04473   404   NtContinue  (1244288, 0, ...
 04474   404   NtContinue  (1244288, 0, ...
 04475   404   NtContinue  (1244288, 0, ...
 04476   404   NtContinue  (1244288, 0, ...
 04477   404   NtContinue  (1244288, 0, ...
 04478   404   NtContinue  (1244288, 0, ...
 04479   404   NtContinue  (1244288, 0, ...
 04480   404   NtContinue  (1244288, 0, ...
 04481   404   NtContinue  (1244288, 0, ...
 04482   404   NtContinue  (1244288, 0, ...
 04483   404   NtContinue  (1244288, 0, ...
 04484   404   NtContinue  (1244288, 0, ...
 04485   404   NtContinue  (1244288, 0, ...
 04486   404   NtContinue  (1244288, 0, ...
 04487   404   NtContinue  (1244288, 0, ...
 04488   404   NtContinue  (1244288, 0, ...
 04489   404   NtContinue  (1244288, 0, ...
 04490   404   NtContinue  (1244288, 0, ...
 04491   404   NtContinue  (1244288, 0, ...
 04492   404   NtContinue  (1244288, 0, ...
 04493   404   NtContinue  (1244288, 0, ...
 04494   404   NtContinue  (1244288, 0, ...
 04495   404   NtContinue  (1244288, 0, ...
 04496   404   NtContinue  (1244288, 0, ...
 04497   404   NtContinue  (1244288, 0, ...
 04498   404   NtContinue  (1244288, 0, ...
 04499   404   NtContinue  (1244288, 0, ...
 04500   404   NtContinue  (1244288, 0, ...
 04501   404   NtContinue  (1244288, 0, ...
 04502   404   NtContinue  (1244288, 0, ...
 04503   404   NtContinue  (1244288, 0, ...
 04504   404   NtContinue  (1244288, 0, ...
 04505   404   NtContinue  (1244288, 0, ...
 04506   404   NtContinue  (1244288, 0, ...
 04507   404   NtContinue  (1244288, 0, ...
 04508   404   NtContinue  (1244288, 0, ...
 04509   404   NtContinue  (1244288, 0, ...
 04510   404   NtContinue  (1244288, 0, ...
 04511   404   NtContinue  (1244288, 0, ...
 04512   404   NtContinue  (1244288, 0, ...
 04513   404   NtContinue  (1244288, 0, ...
 04514   404   NtContinue  (1244288, 0, ...
 04515   404   NtContinue  (1244288, 0, ...
 04516   404   NtContinue  (1244288, 0, ...
 04517   404   NtContinue  (1244288, 0, ...
 04518   404   NtContinue  (1244288, 0, ...
 04519   404   NtContinue  (1244288, 0, ...
 04520   404   NtContinue  (1244288, 0, ...
 04521   404   NtContinue  (1244288, 0, ...
 04522   404   NtContinue  (1244288, 0, ...
 04523   404   NtContinue  (1244288, 0, ...
 04524   404   NtContinue  (1244288, 0, ...
 04525   404   NtContinue  (1244288, 0, ...
 04526   404   NtContinue  (1244288, 0, ...
 04527   404   NtContinue  (1244288, 0, ...
 04528   404   NtContinue  (1244288, 0, ...
 04529   404   NtContinue  (1244288, 0, ...
 04530   404   NtContinue  (1244288, 0, ...
 04531   404   NtContinue  (1244288, 0, ...
 04532   404   NtContinue  (1244288, 0, ...
 04533   404   NtContinue  (1244288, 0, ...
 04534   404   NtContinue  (1244288, 0, ...
 04535   404   NtContinue  (1244288, 0, ...
 04536   404   NtContinue  (1244288, 0, ...
 04537   404   NtContinue  (1244288, 0, ...
 04538   404   NtContinue  (1244288, 0, ...
 04539   404   NtContinue  (1244288, 0, ...
 04540   404   NtContinue  (1244288, 0, ...
 04541   404   NtContinue  (1244288, 0, ...
 04542   404   NtContinue  (1244288, 0, ...
 04543   404   NtContinue  (1244288, 0, ...
 04544   404   NtContinue  (1244288, 0, ...
 04545   404   NtContinue  (1244288, 0, ...
 04546   404   NtContinue  (1244288, 0, ...
 04547   404   NtContinue  (1244288, 0, ...
 04548   404   NtContinue  (1244288, 0, ...
 04549   404   NtContinue  (1244288, 0, ...
 04550   404   NtContinue  (1244288, 0, ...
 04551   404   NtContinue  (1244288, 0, ...
 04552   404   NtContinue  (1244288, 0, ...
 04553   404   NtContinue  (1244288, 0, ...
 04554   404   NtContinue  (1244288, 0, ...
 04555   404   NtContinue  (1244288, 0, ...
 04556   404   NtContinue  (1244288, 0, ...
 04557   404   NtContinue  (1244288, 0, ...
 04558   404   NtContinue  (1244288, 0, ...
 04559   404   NtContinue  (1244288, 0, ...
 04560   404   NtContinue  (1244288, 0, ...
 04561   404   NtContinue  (1244288, 0, ...
 04562   404   NtContinue  (1244288, 0, ...
 04563   404   NtContinue  (1244288, 0, ...
 04564   404   NtContinue  (1244288, 0, ...
 04565   404   NtContinue  (1244288, 0, ...
 04566   404   NtContinue  (1244288, 0, ...
 04567   404   NtContinue  (1244288, 0, ...
 04568   404   NtContinue  (1244288, 0, ...
 04569   404   NtContinue  (1244288, 0, ...
 04570   404   NtContinue  (1244288, 0, ...
 04571   404   NtContinue  (1244288, 0, ...
 04572   404   NtContinue  (1244288, 0, ...
 04573   404   NtContinue  (1244288, 0, ...
 04574   404   NtContinue  (1244288, 0, ...
 04575   404   NtContinue  (1244288, 0, ...
 04576   404   NtContinue  (1244288, 0, ...
 04577   404   NtContinue  (1244288, 0, ...
 04578   404   NtContinue  (1244288, 0, ...
 04579   404   NtContinue  (1244288, 0, ...
 04580   404   NtContinue  (1244288, 0, ...
 04581   404   NtContinue  (1244288, 0, ...
 04582   404   NtContinue  (1244288, 0, ...
 04583   404   NtContinue  (1244288, 0, ...
 04584   404   NtContinue  (1244288, 0, ...
 04585   404   NtContinue  (1244288, 0, ...
 04586   404   NtContinue  (1244288, 0, ...
 04587   404   NtContinue  (1244288, 0, ...
 04588   404   NtContinue  (1244288, 0, ...
 04589   404   NtContinue  (1244288, 0, ...
 04590   404   NtContinue  (1244288, 0, ...
 04591   404   NtContinue  (1244288, 0, ...
 04592   404   NtContinue  (1244288, 0, ...
 04593   404   NtContinue  (1244288, 0, ...
 04594   404   NtContinue  (1244288, 0, ...
 04595   404   NtContinue  (1244288, 0, ...
 04596   404   NtContinue  (1244288, 0, ...
 04597   404   NtContinue  (1244288, 0, ...
 04598   404   NtContinue  (1244288, 0, ...
 04599   404   NtContinue  (1244288, 0, ...
 04600   404   NtContinue  (1244288, 0, ...
 04601   404   NtContinue  (1244288, 0, ...
 04602   404   NtContinue  (1244288, 0, ...
 04603   404   NtContinue  (1244288, 0, ...
 04604   404   NtContinue  (1244288, 0, ...
 04605   404   NtContinue  (1244288, 0, ...
 04606   404   NtContinue  (1244288, 0, ...
 04607   404   NtContinue  (1244288, 0, ...
 04608   404   NtContinue  (1244288, 0, ...
 04609   404   NtContinue  (1244288, 0, ...
 04610   404   NtContinue  (1244288, 0, ...
 04611   404   NtContinue  (1244288, 0, ...
 04612   404   NtContinue  (1244288, 0, ...
 04613   404   NtContinue  (1244288, 0, ...
 04614   404   NtContinue  (1244288, 0, ...
 04615   404   NtContinue  (1244288, 0, ...
 04616   404   NtContinue  (1244288, 0, ...
 04617   404   NtContinue  (1244288, 0, ...
 04618   404   NtContinue  (1244288, 0, ...
 04619   404   NtContinue  (1244288, 0, ...
 04620   404   NtContinue  (1244288, 0, ...
 04621   404   NtContinue  (1244288, 0, ...
 04622   404   NtContinue  (1244288, 0, ...
 04623   404   NtContinue  (1244288, 0, ...
 04624   404   NtContinue  (1244288, 0, ...
 04625   404   NtContinue  (1244288, 0, ...
 04626   404   NtContinue  (1244288, 0, ...
 04627   404   NtContinue  (1244288, 0, ...
 04628   404   NtContinue  (1244288, 0, ...
 04629   404   NtContinue  (1244288, 0, ...
 04630   404   NtContinue  (1244288, 0, ...
 04631   404   NtContinue  (1244288, 0, ...
 04632   404   NtContinue  (1244288, 0, ...
 04633   404   NtContinue  (1244288, 0, ...
 04634   404   NtContinue  (1244288, 0, ...
 04635   404   NtContinue  (1244288, 0, ...
 04636   404   NtContinue  (1244288, 0, ...
 04637   404   NtContinue  (1244288, 0, ...
 04638   404   NtContinue  (1244288, 0, ...
 04639   404   NtContinue  (1244288, 0, ...
 04640   404   NtContinue  (1244288, 0, ...
 04641   404   NtContinue  (1244288, 0, ...
 04642   404   NtContinue  (1244288, 0, ...
 04643   404   NtContinue  (1244288, 0, ...
 04644   404   NtContinue  (1244288, 0, ...
 04645   404   NtContinue  (1244288, 0, ...
 04646   404   NtContinue  (1244288, 0, ...
 04647   404   NtContinue  (1244288, 0, ...
 04648   404   NtContinue  (1244288, 0, ...
 04649   404   NtContinue  (1244288, 0, ...
 04650   404   NtContinue  (1244288, 0, ...
 04651   404   NtContinue  (1244288, 0, ...
 04652   404   NtContinue  (1244288, 0, ...
 04653   404   NtContinue  (1244288, 0, ...
 04654   404   NtContinue  (1244288, 0, ...
 04655   404   NtContinue  (1244288, 0, ...
 04656   404   NtContinue  (1244288, 0, ...
 04657   404   NtContinue  (1244288, 0, ...
 04658   404   NtContinue  (1244288, 0, ...
 04659   404   NtContinue  (1244288, 0, ...
 04660   404   NtContinue  (1244288, 0, ...
 04661   404   NtContinue  (1244288, 0, ...
 04662   404   NtContinue  (1244288, 0, ...
 04663   404   NtContinue  (1244288, 0, ...
 04664   404   NtContinue  (1244288, 0, ...
 04665   404   NtContinue  (1244288, 0, ...
 04666   404   NtContinue  (1244288, 0, ...
 04667   404   NtContinue  (1244288, 0, ...
 04668   404   NtContinue  (1244288, 0, ...
 04669   404   NtContinue  (1244288, 0, ...
 04670   404   NtContinue  (1244288, 0, ...
 04671   404   NtContinue  (1244288, 0, ...
 04672   404   NtContinue  (1244288, 0, ...
 04673   404   NtContinue  (1244288, 0, ...
 04674   404   NtContinue  (1244288, 0, ...
 04675   404   NtContinue  (1244288, 0, ...
 04676   404   NtContinue  (1244288, 0, ...
 04677   404   NtContinue  (1244288, 0, ...
 04678   404   NtContinue  (1244288, 0, ...
 04679   404   NtContinue  (1244288, 0, ...
 04680   404   NtContinue  (1244288, 0, ...
 04681   404   NtContinue  (1244288, 0, ...
 04682   404   NtContinue  (1244288, 0, ...
 04683   404   NtContinue  (1244288, 0, ...
 04684   404   NtContinue  (1244288, 0, ...
 04685   404   NtContinue  (1244288, 0, ...
 04686   404   NtContinue  (1244288, 0, ...
 04687   404   NtContinue  (1244288, 0, ...
 04688   404   NtContinue  (1244288, 0, ...
 04689   404   NtContinue  (1244288, 0, ...
 04690   404   NtContinue  (1244288, 0, ...
 04691   404   NtContinue  (1244288, 0, ...
 04692   404   NtContinue  (1244288, 0, ...
 04693   404   NtContinue  (1244288, 0, ...
 04694   404   NtContinue  (1244288, 0, ...
 04695   404   NtContinue  (1244288, 0, ...
 04696   404   NtContinue  (1244288, 0, ...
 04697   404   NtContinue  (1244288, 0, ...
 04698   404   NtContinue  (1244288, 0, ...
 04699   404   NtContinue  (1244288, 0, ...
 04700   404   NtContinue  (1244288, 0, ...
 04701   404   NtContinue  (1244288, 0, ...
 04702   404   NtContinue  (1244288, 0, ...
 04703   404   NtContinue  (1244288, 0, ...
 04704   404   NtContinue  (1244288, 0, ...
 04705   404   NtContinue  (1244288, 0, ...
 04706   404   NtContinue  (1244288, 0, ...
 04707   404   NtContinue  (1244288, 0, ...
 04708   404   NtContinue  (1244288, 0, ...
 04709   404   NtContinue  (1244288, 0, ...
 04710   404   NtContinue  (1244288, 0, ...
 04711   404   NtContinue  (1244288, 0, ...
 04712   404   NtContinue  (1244288, 0, ...
 04713   404   NtContinue  (1244288, 0, ...
 04714   404   NtContinue  (1244288, 0, ...
 04715   404   NtContinue  (1244288, 0, ...
 04716   404   NtContinue  (1244288, 0, ...
 04717   404   NtContinue  (1244288, 0, ...
 04718   404   NtContinue  (1244288, 0, ...
 04719   404   NtContinue  (1244288, 0, ...
 04720   404   NtContinue  (1244288, 0, ...
 04721   404   NtContinue  (1244288, 0, ...
 04722   404   NtContinue  (1244288, 0, ...
 04723   404   NtContinue  (1244288, 0, ...
 04724   404   NtContinue  (1244288, 0, ...
 04725   404   NtContinue  (1244288, 0, ...
 04726   404   NtContinue  (1244288, 0, ...
 04727   404   NtContinue  (1244284, 0, ...
 04728   404   NtContinue  (1244284, 0, ...
 04729   404   NtContinue  (1244284, 0, ...
 04730   404   NtContinue  (1244284, 0, ...
 04731   404   NtContinue  (1244284, 0, ...
 04732   404   NtContinue  (1244284, 0, ...
 04733   404   NtContinue  (1244284, 0, ...
 04734   404   NtContinue  (1244284, 0, ...
 04735   404   NtContinue  (1244284, 0, ...
 04736   404   NtContinue  (1244284, 0, ...
 04737   404   NtContinue  (1244284, 0, ...
 04738   404   NtContinue  (1244284, 0, ...
 04739   404   NtContinue  (1244284, 0, ...
 04740   404   NtContinue  (1244284, 0, ...
 04741   404   NtContinue  (1244284, 0, ...
 04742   404   NtContinue  (1244284, 0, ...
 04743   404   NtContinue  (1244284, 0, ...
 04744   404   NtContinue  (1244284, 0, ...
 04745   404   NtContinue  (1244284, 0, ...
 04746   404   NtContinue  (1244284, 0, ...
 04747   404   NtContinue  (1244284, 0, ...
 04748   404   NtContinue  (1244284, 0, ...
 04749   404   NtContinue  (1244284, 0, ...
 04750   404   NtContinue  (1244284, 0, ...
 04751   404   NtContinue  (1244284, 0, ...
 04752   404   NtContinue  (1244284, 0, ...
 04753   404   NtContinue  (1244284, 0, ...
 04754   404   NtContinue  (1244284, 0, ...
 04755   404   NtContinue  (1244284, 0, ...
 04756   404   NtContinue  (1244284, 0, ...
 04757   404   NtContinue  (1244284, 0, ...
 04758   404   NtContinue  (1244284, 0, ...
 04759   404   NtContinue  (1244288, 0, ...
 04760   404   NtContinue  (1244284, 0, ...
 04761   404   NtContinue  (1244284, 0, ...
 04762   404   NtContinue  (1244284, 0, ...
 04763   404   NtContinue  (1244284, 0, ...
 04764   404   NtContinue  (1244288, 0, ...
 04765   404   NtContinue  (1244284, 0, ...
 04766   404   NtContinue  (1244284, 0, ...
 04767   404   NtContinue  (1244284, 0, ...
 04768   404   NtContinue  (1244288, 0, ...
 04769   404   NtContinue  (1244284, 0, ...
 04770   404   NtContinue  (1244284, 0, ...
 04771   404   NtContinue  (1244288, 0, ...
 04772   404   NtContinue  (1244284, 0, ...
 04773   404   NtContinue  (1244284, 0, ...
 04774   404   NtContinue  (1244284, 0, ...
 04775   404   NtContinue  (1244284, 0, ...
 04776   404   NtContinue  (1244284, 0, ...
 04777   404   NtContinue  (1244284, 0, ...
 04778   404   NtContinue  (1244288, 0, ...
 04779   404   NtContinue  (1244284, 0, ...
 04780   404   NtContinue  (1244284, 0, ...
 04781   404   NtContinue  (1244284, 0, ...
 04782   404   NtContinue  (1244284, 0, ...
 04783   404   NtContinue  (1244284, 0, ...
 04784   404   NtContinue  (1244284, 0, ...
 04785   404   NtContinue  (1244288, 0, ...
 04786   404   NtContinue  (1244284, 0, ...
 04787   404   NtContinue  (1244284, 0, ...
 04788   404   NtContinue  (1244284, 0, ...
 04789   404   NtContinue  (1244284, 0, ...
 04790   404   NtContinue  (1244284, 0, ...
 04791   404   NtContinue  (1244284, 0, ...
 04792   404   NtContinue  (1244284, 0, ...
 04793   404   NtContinue  (1244284, 0, ...
 04794   404   NtContinue  (1244284, 0, ...
 04795   404   NtContinue  (1244284, 0, ...
 04796   404   NtContinue  (1244284, 0, ...
 04797   404   NtContinue  (1244284, 0, ...
 04798   404   NtContinue  (1244284, 0, ...
 04799   404   NtContinue  (1244284, 0, ...
 04800   404   NtContinue  (1244284, 0, ...
 04801   404   NtContinue  (1244284, 0, ...
 04802   404   NtContinue  (1244284, 0, ...
 04803   404   NtContinue  (1244284, 0, ...
 04804   404   NtContinue  (1244284, 0, ...
 04805   404   NtContinue  (1244284, 0, ...
 04806   404   NtContinue  (1244284, 0, ...
 04807   404   NtContinue  (1244284, 0, ...
 04808   404   NtContinue  (1244284, 0, ...
 04809   404   NtContinue  (1244284, 0, ...
 04810   404   NtContinue  (1244284, 0, ...
 04811   404   NtContinue  (1244284, 0, ...
 04812   404   NtContinue  (1244284, 0, ...
 04813   404   NtContinue  (1244284, 0, ...
 04814   404   NtContinue  (1244284, 0, ...
 04815   404   NtContinue  (1244284, 0, ...
 04816   404   NtContinue  (1244284, 0, ...
 04817   404   NtContinue  (1244284, 0, ...
 04818   404   NtContinue  (1244284, 0, ...
 04819   404   NtContinue  (1244284, 0, ...
 04820   404   NtContinue  (1244284, 0, ...
 04821   404   NtContinue  (1244284, 0, ...
 04822   404   NtContinue  (1244284, 0, ...
 04823   404   NtContinue  (1244284, 0, ...
 04824   404   NtContinue  (1244284, 0, ...
 04825   404   NtContinue  (1244284, 0, ...
 04826   404   NtContinue  (1244284, 0, ...
 04827   404   NtContinue  (1244284, 0, ...
 04828   404   NtContinue  (1244284, 0, ...
 04829   404   NtContinue  (1244284, 0, ...
 04830   404   NtContinue  (1244284, 0, ...
 04831   404   NtContinue  (1244284, 0, ...
 04832   404   NtContinue  (1244284, 0, ...
 04833   404   NtContinue  (1244288, 0, ...
 04834   404   NtContinue  (1244284, 0, ...
 04835   404   NtContinue  (1244288, 0, ...
 04836   404   NtContinue  (1244284, 0, ...
 04837   404   NtContinue  (1244284, 0, ...
 04838   404   NtContinue  (1244284, 0, ...
 04839   404   NtContinue  (1244284, 0, ...
 04840   404   NtContinue  (1244284, 0, ...
 04841   404   NtContinue  (1244284, 0, ...
 04842   404   NtContinue  (1244284, 0, ...
 04843   404   NtContinue  (1244284, 0, ...
 04844   404   NtContinue  (1244284, 0, ...
 04845   404   NtContinue  (1244284, 0, ...
 04846   404   NtContinue  (1244284, 0, ...
 04847   404   NtContinue  (1244284, 0, ...
 04848   404   NtContinue  (1244284, 0, ...
 04849   404   NtContinue  (1244284, 0, ...
 04850   404   NtContinue  (1244284, 0, ...
 04851   404   NtContinue  (1244284, 0, ...
 04852   404   NtContinue  (1244284, 0, ...
 04853   404   NtContinue  (1244284, 0, ...
 04854   404   NtContinue  (1244284, 0, ...
 04855   404   NtContinue  (1244284, 0, ...
 04856   404   NtContinue  (1244284, 0, ...
 04857   404   NtContinue  (1244284, 0, ...
 04858   404   NtContinue  (1244284, 0, ...
 04859   404   NtContinue  (1244288, 0, ...
 04860   404   NtContinue  (1244284, 0, ...
 04861   404   NtContinue  (1244284, 0, ...
 04862   404   NtContinue  (1244284, 0, ...
 04863   404   NtContinue  (1244284, 0, ...
 04864   404   NtContinue  (1244284, 0, ...
 04865   404   NtContinue  (1244284, 0, ...
 04866   404   NtContinue  (1244284, 0, ...
 04867   404   NtContinue  (1244284, 0, ...
 04868   404   NtContinue  (1244284, 0, ...
 04869   404   NtContinue  (1244284, 0, ...
 04870   404   NtContinue  (1244288, 0, ...
 04871   404   NtContinue  (1244284, 0, ...
 04872   404   NtContinue  (1244284, 0, ...
 04873   404   NtContinue  (1244288, 0, ...
 04874   404   NtContinue  (1244284, 0, ...
 04875   404   NtContinue  (1244284, 0, ...
 04876   404   NtContinue  (1244284, 0, ...
 04877   404   NtContinue  (1244284, 0, ...
 04878   404   NtContinue  (1244284, 0, ...
 04879   404   NtContinue  (1244284, 0, ...
 04880   404   NtContinue  (1244284, 0, ...
 04881   404   NtContinue  (1244284, 0, ...
 04882   404   NtContinue  (1244284, 0, ...
 04883   404   NtContinue  (1244284, 0, ...
 04884   404   NtContinue  (1244284, 0, ...
 04885   404   NtContinue  (1244284, 0, ...
 04886   404   NtContinue  (1244284, 0, ...
 04887   404   NtContinue  (1244284, 0, ...
 04888   404   NtContinue  (1244284, 0, ...
 04889   404   NtContinue  (1244284, 0, ...
 04890   404   NtContinue  (1244284, 0, ...
 04891   404   NtContinue  (1244284, 0, ...
 04892   404   NtContinue  (1244284, 0, ...
 04893   404   NtContinue  (1244284, 0, ...
 04894   404   NtContinue  (1244284, 0, ...
 04895   404   NtContinue  (1244284, 0, ...
 04896   404   NtContinue  (1244284, 0, ...
 04897   404   NtContinue  (1244284, 0, ...
 04898   404   NtContinue  (1244284, 0, ...
 04899   404   NtContinue  (1244284, 0, ...
 04900   404   NtContinue  (1244284, 0, ...
 04901   404   NtContinue  (1244288, 0, ...
 04902   404   NtContinue  (1244284, 0, ...
 04903   404   NtContinue  (1244284, 0, ...
 04904   404   NtContinue  (1244288, 0, ...
 04905   404   NtContinue  (1244284, 0, ...
 04906   404   NtContinue  (1244284, 0, ...
 04907   404   NtContinue  (1244284, 0, ...
 04908   404   NtContinue  (1244284, 0, ...
 04909   404   NtContinue  (1244284, 0, ...
 04910   404   NtContinue  (1244284, 0, ...
 04911   404   NtContinue  (1244284, 0, ...
 04912   404   NtContinue  (1244284, 0, ...
 04913   404   NtContinue  (1244284, 0, ...
 04914   404   NtContinue  (1244284, 0, ...
 04915   404   NtContinue  (1244284, 0, ...
 04916   404   NtContinue  (1244284, 0, ...
 04917   404   NtContinue  (1244284, 0, ...
 04918   404   NtContinue  (1244284, 0, ...
 04919   404   NtContinue  (1244284, 0, ...
 04920   404   NtContinue  (1244284, 0, ...
 04921   404   NtContinue  (1244284, 0, ...
 04922   404   NtContinue  (1244284, 0, ...
 04923   404   NtContinue  (1244284, 0, ...
 04924   404   NtContinue  (1244284, 0, ...
 04925   404   NtContinue  (1244284, 0, ...
 04926   404   NtContinue  (1244284, 0, ...
 04927   404   NtContinue  (1244284, 0, ...
 04928   404   NtContinue  (1244284, 0, ...
 04929   404   NtContinue  (1244284, 0, ...
 04930   404   NtContinue  (1244284, 0, ...
 04931   404   NtContinue  (1244284, 0, ...
 04932   404   NtContinue  (1244284, 0, ...
 04933   404   NtContinue  (1244284, 0, ...
 04934   404   NtContinue  (1244284, 0, ...
 04935   404   NtContinue  (1244284, 0, ...
 04936   404   NtContinue  (1244284, 0, ...
 04937   404   NtContinue  (1244284, 0, ...
 04938   404   NtContinue  (1244284, 0, ...
 04939   404   NtContinue  (1244284, 0, ...
 04940   404   NtContinue  (1244288, 0, ...
 04941   404   NtContinue  (1244284, 0, ...
 04942   404   NtContinue  (1244284, 0, ...
 04943   404   NtContinue  (1244272, 0, ...
 04944   404   NtContinue  (1244252, 0, ...
 04945   404   NtUserCallOneParam  (0, 40, ... ) == 0x4
 04946   404   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04947   404   NtOpenKey  (0xf0019, {24, 28, 0x40, 0, 0,  (0xf0019, {24, 28, 0x40, 0, 0, "Software\Borland\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04948   404   NtOpenKey  (0xf0019, {24, 64, 0x40, 0, 0,  (0xf0019, {24, 64, 0x40, 0, 0, "Software\Borland\Delphi\Locales"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND
 04949   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04950   404   NtReleaseMutant  (16, ...
 04951   404   NtContinue  (-130908024, 0, ...
 04950   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04952   404   NtAllocateVirtualMemory  (-1, 1355776, 0, 4096, 4096, 4, ... 1355776, 4096, ) == 0x0
 04953   404   NtAllocateVirtualMemory  (-1, 0, 0, 1048576, 8192, 1, ... 11599872, 1048576, ) == 0x0
 04954   404   NtAllocateVirtualMemory  (-1, 11599872, 0, 16384, 4096, 4, ... 11599872, 16384, ) == 0x0
 04955   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04956   404   NtReleaseMutant  (16, ...
 04957   404   NtContinue  (-130908024, 0, ...
 04956   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04958   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04959   404   NtReleaseMutant  (16, ...
 04960   404   NtContinue  (-130908024, 0, ...
 04959   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04961   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04962   404   NtReleaseMutant  (16, ...
 04963   404   NtContinue  (-130908024, 0, ...
 04962   404   NtReleaseMutant  ... ) == STATUS_MUTANT_NOT_OWNED
 04964   404   NtWaitForSingleObject  (16, 0, 0x0, ... ) == STATUS_ACCESS_DENIED
 04965   404   NtReleaseMutant  (16, ...