Summary:

NtAddAtom(>) 1 NtQueryInstallUILanguage(>) 1 NtOpenDirectoryObject(>) 2 NtCreateSection(>) 13
NtCallbackReturn(>) 1 NtQueryObject(>) 1 NtSetInformationObject(>) 2 NtQueryAttributesFile(>) 14
NtCreateEvent(>) 1 NtQuerySymbolicLinkObject(>) 1 NtAccessCheck(>) 3 NtOpenSection(>) 20
NtCreateFile(>) 1 NtQueryVolumeInformationFile(>) 1 NtGdiCreateCompatibleDC(>) 3 NtOpenFile(>) 21
NtCreateKey(>) 1 NtReadFile(>) 1 NtUserRegisterWindowMessage(>) 3 NtQuerySystemInformation(>) 24
NtCreateSemaphore(>) 1 NtRegisterThreadTerminatePort(>) 1 NtQueryDefaultLocale(>) 4 NtQueryValueKey(>) 26
NtDuplicateObject(>) 1 NtSecureConnectPort(>) 1 NtGdiGetStockObject(>) 5 NtAllocateVirtualMemory(>) 28
NtEnumerateValueKey(>) 1 NtSetInformationProcess(>) 1 NtOpenProcessToken(>) 5 NtMapViewOfSection(>) 29
NtFsControlFile(>) 1 NtSetInformationThread(>) 1 NtQueryInformationProcess(>) 5 NtUserFindExistingCursorIcon(>) 50
NtGdiCreateBitmap(>) 1 NtSetValueKey(>) 1 NtQuerySection(>) 5 NtOpenKey(>) 60
NtGdiInit(>) 1 NtTestAlert(>) 1 NtRequestWaitReplyPort(>) 7 NtUserRegisterClassExWOW(>) 61
NtGdiQueryFontAssocInfo(>) 1 NtUserCallNoParam(>) 1 NtOpenProcessTokenEx(>) 8 NtFlushInstructionCache(>) 65
NtGdiSelectBitmap(>) 1 NtUserCallOneParam(>) 1 NtOpenThreadTokenEx(>) 8 NtClose(>) 88
NtOpenEvent(>) 1 NtUserGetDC(>) 1 NtQueryDefaultUILanguage(>) 8 NtProtectVirtualMemory(>) 130
NtOpenKeyedEvent(>) 1 NtUserGetThreadDesktop(>) 1 NtUnmapViewOfSection(>) 8 NtContinue(>) 2111
NtOpenProcess(>) 1 NtDeviceIoControlFile(>) 2 NtQueryDebugFilterState(>) 9 NtQueryVirtualMemory(>) 2114
NtOpenSymbolicLinkObject(>) 1 NtFreeVirtualMemory(>) 2 NtQueryInformationToken(>) 11
NtQueryInformationFile(>) 1 NtGdiCreateSolidBrush(>) 2

Trace:

00001 928 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 928 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 928 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 928 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 928 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 928 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 928 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 928 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 928 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 928 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 928 NtClose (12, ... ) == 0x0 00015 928 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 928 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 928 NtClose (16, ... ) == 0x0 00021 928 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 928 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 928 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 928 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 928 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 928 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 928 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0 00029 928 NtClose (16, ... ) == 0x0 00030 928 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 928 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 928 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 928 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 928 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 1972, 928, 57959, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ... {28, 56, reply, 0, 1972, 928, 57959, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 1972, 928, 57959, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ) == 0x0 00036 928 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 928 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 928 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 928 NtClose (16, ... ) == 0x0 00041 928 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 928 NtClose (16, ... ) == 0x0 00044 928 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 928 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 928 NtClose (16, ... ) == 0x0 00048 928 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 928 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 928 NtClose (16, ... ) == 0x0 00052 928 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 928 NtClose (16, ... ) == 0x0 00055 928 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 928 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 928 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 928 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 928 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 1972, 928, 57960, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ... {24, 52, reply, 0, 1972, 928, 57960, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 1972, 928, 57960, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ) == 0x0 00060 928 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 1972, 928, 57961, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ... {28, 56, reply, 0, 1972, 928, 57961, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 1972, 928, 57961, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ) == 0x0 00061 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 128, ) == 0x0 00062 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 128, ... (0x46d000), 77824, 4, ) == 0x0 00063 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00064 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00065 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00066 928 NtClose (16, ... ) == 0x0 00067 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00068 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00069 928 NtClose (16, ... ) == 0x0 00070 928 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00071 928 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00072 928 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00073 928 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00074 928 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00075 928 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00076 928 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00077 928 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00078 928 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00079 928 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00080 928 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00081 928 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00082 928 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00083 928 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00084 928 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00085 928 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00086 928 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00087 928 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00088 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00089 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00090 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00091 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "advapi32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00092 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00093 928 NtClose (16, ... ) == 0x0 00094 928 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00095 928 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00096 928 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00097 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 16, ) }, ... 16, ) == 0x0 00098 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00099 928 NtClose (16, ... ) == 0x0 00100 928 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00101 928 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00102 928 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00103 928 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00104 928 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00105 928 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00106 928 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00107 928 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00108 928 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00109 928 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00110 928 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00111 928 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00112 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00113 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00114 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00115 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00116 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00117 928 NtClose (16, ... ) == 0x0 00118 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00119 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00120 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00121 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00122 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00123 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00124 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00125 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00126 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00127 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 16, ) }, ... 16, ) == 0x0 00128 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00129 928 NtClose (16, ... ) == 0x0 00130 928 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00131 928 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00132 928 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00133 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00134 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00135 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00136 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00137 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00138 928 NtClose (16, ... ) == 0x0 00139 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00140 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00141 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00142 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00143 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00144 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00145 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00146 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00147 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00148 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00149 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00150 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00151 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00152 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00153 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00154 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00155 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00156 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00157 928 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00158 928 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00159 928 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00160 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00161 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00162 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00163 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00164 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00165 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00166 928 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00167 928 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00168 928 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00169 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00170 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00171 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00172 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00173 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00174 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00175 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00176 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c9c0000), 0x0, 8482816, ) == 0x0 00177 928 NtClose (16, ... ) == 0x0 00178 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00179 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00180 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00181 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00182 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00183 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00184 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00185 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00186 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00187 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00188 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00189 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00190 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00191 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00192 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00193 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00194 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00195 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00196 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 16, ) }, ... 16, ) == 0x0 00197 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f60000), 0x0, 483328, ) == 0x0 00198 928 NtClose (16, ... ) == 0x0 00199 928 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00200 928 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00201 928 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00202 928 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00203 928 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00204 928 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00205 928 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00206 928 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00207 928 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00208 928 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00209 928 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00210 928 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00211 928 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00212 928 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00213 928 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00214 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00215 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00216 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00217 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00218 928 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00219 928 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00220 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00221 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00222 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00223 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00224 928 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00225 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00226 928 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00227 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == 0x0 00228 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00229 928 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00230 928 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00231 928 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00232 928 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00233 928 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00234 928 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00235 928 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00236 928 NtClose (36, ... ) == 0x0 00237 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00238 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00239 928 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00240 928 NtClose (36, ... ) == 0x0 00241 928 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00242 928 NtClose (32, ... ) == 0x0 00243 928 NtClose (16, ... ) == 0x0 00244 928 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 94208, ) == 0x0 00245 928 NtClose (28, ... ) == 0x0 00246 928 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00247 928 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00248 928 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00249 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00251 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == 0x0 00252 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00253 928 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00254 928 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00255 928 NtClose (28, ... ) == 0x0 00256 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00257 928 NtClose (16, ... ) == 0x0 00258 928 NtProtectVirtualMemory (-1, (0x71aa1000), 352, 4, ... (0x71aa1000), 4096, 32, ) == 0x0 00259 928 NtProtectVirtualMemory (-1, (0x71aa1000), 4096, 32, ... (0x71aa1000), 4096, 4, ) == 0x0 00260 928 NtFlushInstructionCache (-1, 1906970624, 352, ... ) == 0x0 00261 928 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00262 928 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00263 928 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00264 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00265 928 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00266 928 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00267 928 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00268 928 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00269 928 NtReadFile (16, 0, 0, 0, 4, {198652, 0}, 0, ... {status=0x0, info=4}, (16, 0, 0, 0, 4, {198652, 0}, 0, ... {status=0x0, info=4}, "ose ", ) , ) == 0x0 00270 928 NtClose (16, ... ) == 0x0 00271 928 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00272 928 NtOpenProcessToken (-1, 0x8, ... 16, ) == 0x0 00273 928 NtQueryInformationToken (16, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00274 928 NtClose (16, ... ) == 0x0 00275 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00276 928 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00277 928 NtClose (16, ... ) == 0x0 00278 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00279 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00280 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00281 928 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 1972, 928, 57962, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ... {28, 56, reply, 0, 1972, 928, 57962, 0} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 1972, 928, 57962, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ) == 0x0 00282 928 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 16, ) }, ... 16, ) == 0x0 00283 928 NtQueryValueKey (16, (16, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00284 928 NtClose (16, ... ) == 0x0 00285 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00286 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00287 928 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00288 928 NtClose (16, ... ) == 0x0 00289 928 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00290 928 NtClose (28, ... ) == 0x0 00291 928 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00292 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00293 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00294 928 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00295 928 NtClose (28, ... ) == 0x0 00296 928 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00297 928 NtClose (16, ... ) == 0x0 00298 928 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00299 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00300 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00301 928 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00302 928 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00303 928 NtClose (16, ... ) == 0x0 00304 928 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00305 928 NtClose (28, ... ) == 0x0 00306 928 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00307 928 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00308 928 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00309 928 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00310 928 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00311 928 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00312 928 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00313 928 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00314 928 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00315 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00316 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00317 928 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00318 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00319 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00320 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00322 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00323 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00325 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00326 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00327 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00328 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00330 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00331 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00332 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 28, ) }, ... 28, ) == 0x0 00333 928 NtQueryValueKey (28, (28, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00334 928 NtClose (28, ... ) == 0x0 00335 928 NtMapViewOfSection (-2147482584, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x480000), 0x0, 1060864, ) == 0x0 00336 928 NtClose (-2147482584, ... ) == 0x0 00337 928 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 28, ) == 0x0 00338 928 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00339 928 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147482584, ) == 0x0 00340 928 NtQueryInformationToken (-2147482584, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00341 928 NtQueryInformationToken (-2147482584, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00342 928 NtClose (-2147482584, ... ) == 0x0 00343 928 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00344 928 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00345 928 NtDuplicateObject (-1, 16, -1, 0x0, 0, 2, ... 36, ) == 0x0 00346 928 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482584, ) }, ... -2147482584, ) == 0x0 00347 928 NtQueryValueKey (-2147482584, (-2147482584, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00348 928 NtClose (-2147482584, ... ) == 0x0 00349 928 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482584, ) }, ... -2147482584, ) == 0x0 00350 928 NtQueryValueKey (-2147482584, (-2147482584, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00351 928 NtClose (-2147482584, ... ) == 0x0 00352 928 NtQueryDefaultLocale (0, -139609780, ... ) == 0x0 00353 928 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00354 928 NtUserCallNoParam (24, ... ) == 0x0 00355 928 NtGdiCreateCompatibleDC (0, ... 00356 928 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00355 928 NtGdiCreateCompatibleDC ... ) == 0xee0105b0 00357 928 NtGdiGetStockObject (0, ... ) == 0x1900010 00358 928 NtGdiGetStockObject (4, ... ) == 0x1900011 00359 928 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0x76050581 00360 928 NtGdiCreateSolidBrush (0, 0, ... 00361 928 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8978432, 4096, ) == 0x0 00360 928 NtGdiCreateSolidBrush ... ) == 0xa51003d2 00362 928 NtGdiGetStockObject (13, ... ) == 0x18a0021 00363 928 NtGdiCreateCompatibleDC (0, ... ) == 0x5201039b 00364 928 NtGdiSelectBitmap (1375798171, 1980040577, ... ) == 0x185000f 00365 928 NtUserGetThreadDesktop (928, 0, ... ) == 0x20 00366 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00367 928 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00368 928 NtClose (40, ... ) == 0x0 00369 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00370 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x8174c017 00371 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00372 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x8174c01c 00373 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00374 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x8174c01e 00375 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00376 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x81748002 00377 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00378 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x8174c018 00379 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00380 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x8174c01a 00381 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00382 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x8174c01d 00383 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00384 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x8174c026 00385 928 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00386 928 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x8174c019 00387 928 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8174c020 00388 928 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8174c022 00389 928 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8174c023 00390 928 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8174c024 00391 928 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8174c025 00392 928 NtCallbackReturn (0, 0, 0, ... 00393 928 NtGdiInit (... ) == 0x1 00394 928 NtGdiGetStockObject (18, ... ) == 0x290001c 00395 928 NtGdiGetStockObject (19, ... ) == 0x1b00019 00396 928 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00397 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00398 928 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00399 928 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00400 928 NtClose (40, ... ) == 0x0 00401 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00402 928 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00403 928 NtClose (40, ... ) == 0x0 00404 928 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00405 928 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00406 928 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00407 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00408 928 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9043968, 65536, ) == 0x0 00409 928 NtAllocateVirtualMemory (-1, 9043968, 0, 4096, 4096, 4, ... 9043968, 4096, ) == 0x0 00410 928 NtAllocateVirtualMemory (-1, 9048064, 0, 8192, 4096, 4, ... 9048064, 8192, ) == 0x0 00411 928 NtAllocateVirtualMemory (-1, 9056256, 0, 4096, 4096, 4, ... 9056256, 4096, ) == 0x0 00412 928 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00413 928 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8b0000), 0x0, 12288, ) == 0x0 00414 928 NtClose (44, ... ) == 0x0 00415 928 NtAllocateVirtualMemory (-1, 9060352, 0, 4096, 4096, 4, ... 9060352, 4096, ) == 0x0 00416 928 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00417 928 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00418 928 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00419 928 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00420 928 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00421 928 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00422 928 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\260I\20\303^\323\217b\225v\217r3t\372\255\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00423 928 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00424 928 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00425 928 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00426 928 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00427 928 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00428 928 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00429 928 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00430 928 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482584, 2, ) }, 0, 0x0, 0, ... -2147482584, 2, ) == 0x0 00431 928 NtSetValueKey (-2147482584, (-2147482584, "Seed", 0, 3, "\322\246\331,q*\375\34gx\325\320\203\24`p\15\245\20\25\326\5\16\\274\331;o\325fz\220\345f\226\256\307\36\257\34\355\261\333\341@\342P\372\376\0h\321\313o\6\273\373@Nu\245\362S\256\203\203T!\1'\275;\221~\17%/&z~", 80, ... ) , 0, 3, (-2147482584, "Seed", 0, 3, "\322\246\331,q*\375\34gx\325\320\203\24`p\15\245\20\25\326\5\16\\274\331;o\325fz\220\345f\226\256\307\36\257\34\355\261\333\341@\342P\372\376\0h\321\313o\6\273\373@Nu\245\362S\256\203\203T!\1'\275;\221~\17%/&z~", 80, ... ) , 80, ... ) == 0x0 00432 928 NtClose (-2147482584, ... ) == 0x0 00422 928 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\354\223s\31\270H\265\337\243F\215\356?\375Z\274\271 \10r\251\272L\377+\374\367n\307\267\4\261\3473\274i\252\201\303\210U/PQR\12\246q\373\10\311\234Vnx\255\337P-N\374\371 \21\264w\237\314\33kY\224s^\351b`Q\216\241\322N-;;|\230\244=U\356\200\2539\276\262\240g\203\304\340 @\253\313\225\207\36\242A\35Z\311\306\7\256\266\2001`\253\263\225\254L\362[\220\245\263\273\274U\371\313\3529\277\370\33:yF\354\26}\332\327YB\302\325D\300D&\324\242~w\223\327g\270.a\204\210\344\351\265\314\201\267\250\204\0_\322'R\34\333\236\7\343\373\2743\356\224\217\311\260\237\30\340\324p\224\16\372\21\346\374\343Y\215\204\310\343-\233\215w\236\217]r\353\255'\2\\300\270.\207\21\235~"\253r\235\312\254`\226K\344c\35\215o\330f\320\177\211\14=\336\311", ) \253r\235\312\254`\226K\344c\35\215o\330f\320\177\211\14=\336\311", ) == 0x0 00433 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00434 928 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00435 928 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00436 928 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00437 928 NtClose (48, ... ) == 0x0 00438 928 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00439 928 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00440 928 NtClose (48, ... ) == 0x0 00441 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00442 928 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00443 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00444 928 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00445 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00446 928 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00447 928 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00448 928 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00449 928 NtClose (48, ... ) == 0x0 00450 928 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00451 928 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00452 928 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00453 928 NtClose (48, ... ) == 0x0 00454 928 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00455 928 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00456 928 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00457 928 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00458 928 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00459 928 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00460 928 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00461 928 NtCreateSemaphore (0x1f0003, {24, 48, 0x80, 1333696, 0, (0x1f0003, {24, 48, 0x80, 1333696, 0, "shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}"}, 0, 2147483647, ... 52, ) }, 0, 2147483647, ... 52, ) == STATUS_OBJECT_NAME_EXISTS 00462 928 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0 00463 928 NtQueryValueKey (56, (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00464 928 NtClose (56, ... ) == 0x0 00465 928 NtQueryDefaultUILanguage (1241692, ... 00466 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00467 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482584, ) == 0x0 00468 928 NtQueryInformationToken (-2147482584, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00469 928 NtClose (-2147482584, ... ) == 0x0 00470 928 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482584, ) }, ... -2147482584, ) == 0x0 00471 928 NtOpenKey (0x80000000, {24, -2147482584, 0x240, 0, 0, (0x80000000, {24, -2147482584, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00472 928 NtOpenKey (0x80000000, {24, -2147482584, 0x640, 0, 0, (0x80000000, {24, -2147482584, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481332, ) }, ... -2147481332, ) == 0x0 00473 928 NtQueryValueKey (-2147481332, (-2147481332, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00474 928 NtClose (-2147481332, ... ) == 0x0 00475 928 NtClose (-2147482584, ... ) == 0x0 00465 928 NtQueryDefaultUILanguage ... ) == 0x0 00476 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00477 928 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0 00478 928 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 8462336, ) == 0x0 00479 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00480 928 NtQueryDefaultUILanguage (2090319928, ... 00481 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00482 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482584, ) == 0x0 00483 928 NtQueryInformationToken (-2147482584, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00484 928 NtClose (-2147482584, ... ) == 0x0 00485 928 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482584, ) }, ... -2147482584, ) == 0x0 00486 928 NtOpenKey (0x80000000, {24, -2147482584, 0x240, 0, 0, (0x80000000, {24, -2147482584, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00487 928 NtOpenKey (0x80000000, {24, -2147482584, 0x640, 0, 0, (0x80000000, {24, -2147482584, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481332, ) }, ... -2147481332, ) == 0x0 00488 928 NtQueryValueKey (-2147481332, (-2147481332, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00489 928 NtClose (-2147481332, ... ) == 0x0 00490 928 NtClose (-2147482584, ... ) == 0x0 00480 928 NtQueryDefaultUILanguage ... ) == 0x0 00491 928 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00492 928 NtQueryDefaultLocale (1, 1239788, ... ) == 0x0 00493 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00494 928 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1972, 928, 57970, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1972, 928, 57970, 0} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1972, 928, 57970, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ) == 0x0 00495 928 NtClose (56, ... ) == 0x0 00496 928 NtClose (60, ... ) == 0x0 00497 928 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00498 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00499 928 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00500 928 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00501 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00502 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00503 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238980, ... ) }, 1238980, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00504 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00505 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00506 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00507 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 1239044, ... ) }, 1239044, ... ) == 0x0 00508 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0 00509 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00510 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00511 928 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00512 928 NtClose (56, ... ) == 0x0 00513 928 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 1056768, ) == 0x0 00514 928 NtClose (64, ... ) == 0x0 00515 928 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00516 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00517 928 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0 00518 928 NtQuerySection (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00519 928 NtClose (64, ... ) == 0x0 00520 928 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 1060864, ) == 0x0 00521 928 NtClose (56, ... ) == 0x0 00522 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00523 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00524 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00525 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00526 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00527 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00528 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00529 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00530 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00531 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00532 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00533 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00534 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00535 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00536 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00537 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00538 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00539 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00540 928 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00541 928 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00542 928 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00543 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00544 928 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240524, ... ) , 42, 1240524, ... ) == 0x0 00545 928 NtQueryDefaultUILanguage (1239208, ... 00546 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00547 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482584, ) == 0x0 00548 928 NtQueryInformationToken (-2147482584, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00549 928 NtClose (-2147482584, ... ) == 0x0 00550 928 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482584, ) }, ... -2147482584, ) == 0x0 00551 928 NtOpenKey (0x80000000, {24, -2147482584, 0x240, 0, 0, (0x80000000, {24, -2147482584, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00552 928 NtOpenKey (0x80000000, {24, -2147482584, 0x640, 0, 0, (0x80000000, {24, -2147482584, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481332, ) }, ... -2147481332, ) == 0x0 00553 928 NtQueryValueKey (-2147481332, (-2147481332, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00554 928 NtClose (-2147481332, ... ) == 0x0 00555 928 NtClose (-2147482584, ... ) == 0x0 00545 928 NtQueryDefaultUILanguage ... ) == 0x0 00556 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238048, ... ) }, 1238048, ... ) == 0x0 00557 928 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00558 928 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00559 928 NtClose (56, ... ) == 0x0 00560 928 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 4096, ) == 0x0 00561 928 NtClose (64, ... ) == 0x0 00562 928 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00563 928 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237644, ... ) }, 1237644, ... ) == 0x0 00564 928 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1238388, (0x80100080, {24, 0, 0x40, 0, 1238388, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0 00565 928 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00566 928 NtClose (64, ... ) == 0x0 00567 928 NtMapViewOfSection (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8c0000), {0, 0}, 4096, ) == 0x0 00568 928 NtClose (56, ... ) == 0x0 00569 928 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00570 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00571 928 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0 00572 928 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 4096, ) == 0x0 00573 928 NtQueryInformationFile (56, 1238040, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00574 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00575 928 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1972, 928, 57971, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1972, 928, 57971, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1972, 928, 57971, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ) == 0x0 00576 928 NtClose (56, ... ) == 0x0 00577 928 NtClose (64, ... ) == 0x0 00578 928 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00579 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00580 928 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00581 928 NtUserSystemParametersInfo (104, 0, 2001084812, 0, ... ) == 0x1 00582 928 NtUserGetDC (0, ... ) == 0x1010051 00583 928 NtUserCallOneParam (16842833, 57, ... ) == 0x1 00584 928 NtUserSystemParametersInfo (38, 4, 2001086940, 0, ... ) == 0x1 00585 928 NtUserSystemParametersInfo (66, 12, 1240040, 0, ... ) == 0x1 00586 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00587 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 64, ) == 0x0 00588 928 NtQueryInformationToken (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00589 928 NtClose (64, ... ) == 0x0 00590 928 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 64, ) }, ... 64, ) == 0x0 00591 928 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00592 928 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00593 928 NtClose (56, ... ) == 0x0 00594 928 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0 00595 928 NtQueryValueKey (56, (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00596 928 NtClose (56, ... ) == 0x0 00597 928 NtUserSystemParametersInfo (41, 500, 1240068, 0, ... ) == 0x1 00598 928 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00599 928 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00600 928 NtClose (56, ... ) == 0x0 00601 928 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0 00602 928 NtQueryValueKey (56, (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00603 928 NtClose (56, ... ) == 0x0 00604 928 NtUserSystemParametersInfo (27, 0, 2001085788, 0, ... ) == 0x1 00605 928 NtUserSystemParametersInfo (102, 0, 2001086828, 0, ... ) == 0x1 00606 928 NtClose (64, ... ) == 0x0 00607 928 NtUserSystemParametersInfo (4130, 0, 1240572, 0, ... ) == 0x1 00608 928 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 64, ) }, ... 64, ) == 0x0 00609 928 NtEnumerateValueKey (64, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00610 928 NtClose (64, ... ) == 0x0 00611 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00612 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c03b 00613 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c03d 00614 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00615 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c03f 00616 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00617 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c041 00618 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00619 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c043 00620 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c045 00621 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00622 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c047 00623 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00624 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c049 00625 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00626 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c04b 00627 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00628 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c04d 00629 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00630 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c04f 00631 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c051 00632 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00633 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c053 00634 928 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00635 928 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8174c055 00636 928 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00637 928 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8174c057 00638 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00639 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c059 00640 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00641 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c05b 00642 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00643 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c05d 00644 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00645 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c05f 00646 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00647 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c017 00648 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00649 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c019 00650 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00651 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c018 00652 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00653 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c01a 00654 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00655 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c01c 00656 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00657 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c01e 00658 928 NtUserFindExistingCursorIcon (1239812, 1239828, 1239876, ... ) == 0x10011 00659 928 NtUserRegisterClassExWOW (1239812, 1239880, 1239896, 1239912, 0, 384, 0, ... ) == 0x8174c01b 00660 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00661 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c068 00662 928 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00663 928 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c06a 00664 928 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 64, ) }, ... 64, ) == 0x0 00665 928 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5d090000), 0x0, 630784, ) == 0x0 00666 928 NtClose (64, ... ) == 0x0 00667 928 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00668 928 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00669 928 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00670 928 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00671 928 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00672 928 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00673 928 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00674 928 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00675 928 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00676 928 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00677 928 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00678 928 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00679 928 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00680 928 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00681 928 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00682 928 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00683 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00684 928 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0 00685 928 NtAllocateVirtualMemory (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0 00686 928 NtAllocateVirtualMemory (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0 00687 928 NtAllocateVirtualMemory (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0 00688 928 NtAllocateVirtualMemory (-1, 9191424, 0, 4096, 4096, 4, ... 9191424, 4096, ) == 0x0 00689 928 NtQueryDefaultUILanguage (1239820, ... 00690 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00691 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482584, ) == 0x0 00692 928 NtQueryInformationToken (-2147482584, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00693 928 NtClose (-2147482584, ... ) == 0x0 00694 928 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482584, ) }, ... -2147482584, ) == 0x0 00695 928 NtOpenKey (0x80000000, {24, -2147482584, 0x240, 0, 0, (0x80000000, {24, -2147482584, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00696 928 NtOpenKey (0x80000000, {24, -2147482584, 0x640, 0, 0, (0x80000000, {24, -2147482584, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481332, ) }, ... -2147481332, ) == 0x0 00697 928 NtQueryValueKey (-2147481332, (-2147481332, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00698 928 NtClose (-2147481332, ... ) == 0x0 00699 928 NtClose (-2147482584, ... ) == 0x0 00689 928 NtQueryDefaultUILanguage ... ) == 0x0 00700 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll"}, 1, 96, ... 64, {status=0x0, info=1}, ) }, 1, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00701 928 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00702 928 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 618496, ) == 0x0 00703 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00704 928 NtQueryDefaultLocale (1, 1237916, ... ) == 0x0 00705 928 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00706 928 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1972, 928, 57972, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1972, 928, 57972, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1972, 928, 57972, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ) == 0x0 00707 928 NtClose (64, ... ) == 0x0 00708 928 NtClose (56, ... ) == 0x0 00709 928 NtUnmapViewOfSection (-1, 0x8e0000, ... ) == 0x0 00710 928 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00711 928 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {1972, 0}, ... 56, ) == 0x0 00712 928 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00713 928 NtClose (56, ... ) == 0x0 00714 928 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00715 928 NtUserSystemParametersInfo (104, 0, 1561338260, 0, ... ) == 0x1 00716 928 NtUserSystemParametersInfo (38, 4, 1561337988, 0, ... ) == 0x1 00717 928 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00718 928 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00719 928 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00720 928 NtClose (56, ... ) == 0x0 00721 928 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 56, ) }, ... 56, ) == 0x0 00722 928 NtOpenProcessToken (-1, 0x8, ... 64, ) == 0x0 00723 928 NtAccessCheck (1332816, 64, 0x1, 1241012, 1241064, 56, 1241044, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00724 928 NtClose (64, ... ) == 0x0 00725 928 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00726 928 NtQueryValueKey (64, (64, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00727 928 NtClose (64, ... ) == 0x0 00728 928 NtUserSystemParametersInfo (41, 500, 1241192, 0, ... ) == 0x1 00729 928 NtUserSystemParametersInfo (102, 0, 1561338280, 0, ... ) == 0x1 00730 928 NtClose (56, ... ) == 0x0 00731 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00732 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c03b 00733 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c03d 00734 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00735 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c03f 00736 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00737 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c041 00738 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00739 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c043 00740 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c045 00741 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00742 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c047 00743 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00744 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c049 00745 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00746 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c04b 00747 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00748 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c04d 00749 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00750 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c04f 00751 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c051 00752 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00753 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c053 00754 928 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00755 928 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8174c055 00756 928 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00757 928 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8174c057 00758 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00759 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c059 00760 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10013 00761 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c05b 00762 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00763 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c05d 00764 928 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00765 928 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c05f 00766 928 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00767 928 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00768 928 NtTestAlert (... ) == 0x0 00769 928 NtContinue (1244464, 1, ... 00770 928 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x411704,}, 4, ... ) == 0x0 00771 928 NtQueryVirtualMemory (-1, 0x47d64b, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00772 928 NtContinue (1244336, 0, ... 00773 928 NtAllocateVirtualMemory (-1, 0, 0, 122368, 4096, 4, ... 9306112, 122880, ) == 0x0 00774 928 NtQueryVirtualMemory (-1, 0x47d8c6, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00775 928 NtContinue (1244320, 0, ... 00776 928 NtAllocateVirtualMemory (-1, 0, 0, 147456, 4096, 4, ... 9437184, 147456, ) == 0x0 00777 928 NtQueryVirtualMemory (-1, 0x47d9f0, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00778 928 NtContinue (1244320, 0, ... 00779 928 NtQueryVirtualMemory (-1, 0x47dae3, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00780 928 NtContinue (1244328, 0, ... 00781 928 NtQueryVirtualMemory (-1, 0x47dbcf, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00782 928 NtContinue (1244316, 0, ... 00783 928 NtQueryVirtualMemory (-1, 0x47dcf3, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00784 928 NtContinue (1244328, 0, ... 00785 928 NtQueryVirtualMemory (-1, 0x47de0b, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00786 928 NtContinue (1244336, 0, ... 00787 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00788 928 NtContinue (1244328, 0, ... 00789 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00790 928 NtContinue (1244328, 0, ... 00791 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00792 928 NtContinue (1244328, 0, ... 00793 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00794 928 NtContinue (1244328, 0, ... 00795 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00796 928 NtContinue (1244328, 0, ... 00797 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00798 928 NtContinue (1244328, 0, ... 00799 928 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00800 928 NtContinue (1244328, 0, ... 00801 928 NtFreeVirtualMemory (-1, (0x8e0000), 122368, 16384, ... (0x8e0000), 122880, ) == 0x0 00802 928 NtQueryVirtualMemory (-1, 0x47e2de, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00803 928 NtContinue (1244336, 0, ... 00804 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00805 928 NtContinue (1244336, 0, ... 00806 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00807 928 NtContinue (1244336, 0, ... 00808 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00809 928 NtContinue (1244336, 0, ... 00810 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00811 928 NtContinue (1244336, 0, ... 00812 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00813 928 NtContinue (1244336, 0, ... 00814 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00815 928 NtContinue (1244336, 0, ... 00816 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00817 928 NtContinue (1244336, 0, ... 00818 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00819 928 NtContinue (1244336, 0, ... 00820 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00821 928 NtContinue (1244336, 0, ... 00822 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00823 928 NtContinue (1244336, 0, ... 00824 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00825 928 NtContinue (1244336, 0, ... 00826 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00827 928 NtContinue (1244336, 0, ... 00828 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00829 928 NtContinue (1244336, 0, ... 00830 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00831 928 NtContinue (1244336, 0, ... 00832 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00833 928 NtContinue (1244336, 0, ... 00834 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00835 928 NtContinue (1244336, 0, ... 00836 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00837 928 NtContinue (1244336, 0, ... 00838 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00839 928 NtContinue (1244336, 0, ... 00840 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00841 928 NtContinue (1244336, 0, ... 00842 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00843 928 NtContinue (1244336, 0, ... 00844 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00845 928 NtContinue (1244336, 0, ... 00846 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00847 928 NtContinue (1244336, 0, ... 00848 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00849 928 NtContinue (1244336, 0, ... 00850 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00851 928 NtContinue (1244336, 0, ... 00852 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00853 928 NtContinue (1244336, 0, ... 00854 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00855 928 NtContinue (1244336, 0, ... 00856 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00857 928 NtContinue (1244336, 0, ... 00858 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00859 928 NtContinue (1244336, 0, ... 00860 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00861 928 NtContinue (1244336, 0, ... 00862 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00863 928 NtContinue (1244336, 0, ... 00864 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00865 928 NtContinue (1244336, 0, ... 00866 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00867 928 NtContinue (1244336, 0, ... 00868 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00869 928 NtContinue (1244336, 0, ... 00870 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00871 928 NtContinue (1244336, 0, ... 00872 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00873 928 NtContinue (1244336, 0, ... 00874 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00875 928 NtContinue (1244336, 0, ... 00876 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00877 928 NtContinue (1244336, 0, ... 00878 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00879 928 NtContinue (1244336, 0, ... 00880 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00881 928 NtContinue (1244336, 0, ... 00882 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00883 928 NtContinue (1244336, 0, ... 00884 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00885 928 NtContinue (1244336, 0, ... 00886 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00887 928 NtContinue (1244336, 0, ... 00888 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00889 928 NtContinue (1244336, 0, ... 00890 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00891 928 NtContinue (1244336, 0, ... 00892 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00893 928 NtContinue (1244336, 0, ... 00894 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00895 928 NtContinue (1244336, 0, ... 00896 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00897 928 NtContinue (1244336, 0, ... 00898 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00899 928 NtContinue (1244336, 0, ... 00900 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00901 928 NtContinue (1244336, 0, ... 00902 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00903 928 NtContinue (1244336, 0, ... 00904 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00905 928 NtContinue (1244336, 0, ... 00906 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00907 928 NtContinue (1244336, 0, ... 00908 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00909 928 NtContinue (1244336, 0, ... 00910 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00911 928 NtContinue (1244336, 0, ... 00912 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00913 928 NtContinue (1244336, 0, ... 00914 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00915 928 NtContinue (1244336, 0, ... 00916 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00917 928 NtContinue (1244336, 0, ... 00918 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00919 928 NtContinue (1244336, 0, ... 00920 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00921 928 NtContinue (1244336, 0, ... 00922 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00923 928 NtContinue (1244336, 0, ... 00924 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00925 928 NtContinue (1244336, 0, ... 00926 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00927 928 NtContinue (1244336, 0, ... 00928 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00929 928 NtContinue (1244336, 0, ... 00930 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00931 928 NtContinue (1244336, 0, ... 00932 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00933 928 NtContinue (1244336, 0, ... 00934 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00935 928 NtContinue (1244336, 0, ... 00936 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00937 928 NtContinue (1244336, 0, ... 00938 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00939 928 NtContinue (1244336, 0, ... 00940 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00941 928 NtContinue (1244336, 0, ... 00942 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00943 928 NtContinue (1244336, 0, ... 00944 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00945 928 NtContinue (1244336, 0, ... 00946 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00947 928 NtContinue (1244336, 0, ... 00948 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00949 928 NtContinue (1244336, 0, ... 00950 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00951 928 NtContinue (1244336, 0, ... 00952 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00953 928 NtContinue (1244336, 0, ... 00954 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00955 928 NtContinue (1244336, 0, ... 00956 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00957 928 NtContinue (1244336, 0, ... 00958 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00959 928 NtContinue (1244336, 0, ... 00960 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00961 928 NtContinue (1244336, 0, ... 00962 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00963 928 NtContinue (1244336, 0, ... 00964 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00965 928 NtContinue (1244336, 0, ... 00966 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00967 928 NtContinue (1244336, 0, ... 00968 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00969 928 NtContinue (1244336, 0, ... 00970 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00971 928 NtContinue (1244336, 0, ... 00972 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00973 928 NtContinue (1244336, 0, ... 00974 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00975 928 NtContinue (1244336, 0, ... 00976 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00977 928 NtContinue (1244336, 0, ... 00978 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00979 928 NtContinue (1244336, 0, ... 00980 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00981 928 NtContinue (1244336, 0, ... 00982 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00983 928 NtContinue (1244336, 0, ... 00984 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00985 928 NtContinue (1244336, 0, ... 00986 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00987 928 NtContinue (1244336, 0, ... 00988 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00989 928 NtContinue (1244336, 0, ... 00990 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00991 928 NtContinue (1244336, 0, ... 00992 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00993 928 NtContinue (1244336, 0, ... 00994 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00995 928 NtContinue (1244336, 0, ... 00996 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00997 928 NtContinue (1244336, 0, ... 00998 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00999 928 NtContinue (1244336, 0, ... 01000 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01001 928 NtContinue (1244336, 0, ... 01002 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01003 928 NtContinue (1244336, 0, ... 01004 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01005 928 NtContinue (1244336, 0, ... 01006 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01007 928 NtContinue (1244336, 0, ... 01008 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01009 928 NtContinue (1244336, 0, ... 01010 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01011 928 NtContinue (1244336, 0, ... 01012 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01013 928 NtContinue (1244336, 0, ... 01014 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01015 928 NtContinue (1244336, 0, ... 01016 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01017 928 NtContinue (1244336, 0, ... 01018 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01019 928 NtContinue (1244336, 0, ... 01020 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01021 928 NtContinue (1244336, 0, ... 01022 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01023 928 NtContinue (1244336, 0, ... 01024 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01025 928 NtContinue (1244336, 0, ... 01026 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01027 928 NtContinue (1244336, 0, ... 01028 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01029 928 NtContinue (1244336, 0, ... 01030 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01031 928 NtContinue (1244336, 0, ... 01032 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01033 928 NtContinue (1244336, 0, ... 01034 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01035 928 NtContinue (1244336, 0, ... 01036 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01037 928 NtContinue (1244336, 0, ... 01038 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01039 928 NtContinue (1244336, 0, ... 01040 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01041 928 NtContinue (1244336, 0, ... 01042 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01043 928 NtContinue (1244336, 0, ... 01044 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01045 928 NtContinue (1244336, 0, ... 01046 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01047 928 NtContinue (1244336, 0, ... 01048 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01049 928 NtContinue (1244336, 0, ... 01050 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01051 928 NtContinue (1244336, 0, ... 01052 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01053 928 NtContinue (1244336, 0, ... 01054 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01055 928 NtContinue (1244336, 0, ... 01056 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01057 928 NtContinue (1244336, 0, ... 01058 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01059 928 NtContinue (1244336, 0, ... 01060 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01061 928 NtContinue (1244336, 0, ... 01062 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01063 928 NtContinue (1244336, 0, ... 01064 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01065 928 NtContinue (1244336, 0, ... 01066 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01067 928 NtContinue (1244336, 0, ... 01068 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01069 928 NtContinue (1244336, 0, ... 01070 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01071 928 NtContinue (1244336, 0, ... 01072 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01073 928 NtContinue (1244336, 0, ... 01074 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01075 928 NtContinue (1244336, 0, ... 01076 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01077 928 NtContinue (1244336, 0, ... 01078 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01079 928 NtContinue (1244336, 0, ... 01080 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01081 928 NtContinue (1244336, 0, ... 01082 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01083 928 NtContinue (1244336, 0, ... 01084 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01085 928 NtContinue (1244336, 0, ... 01086 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01087 928 NtContinue (1244336, 0, ... 01088 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01089 928 NtContinue (1244336, 0, ... 01090 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01091 928 NtContinue (1244336, 0, ... 01092 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01093 928 NtContinue (1244336, 0, ... 01094 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01095 928 NtContinue (1244336, 0, ... 01096 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01097 928 NtContinue (1244336, 0, ... 01098 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01099 928 NtContinue (1244336, 0, ... 01100 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01101 928 NtContinue (1244336, 0, ... 01102 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01103 928 NtContinue (1244336, 0, ... 01104 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01105 928 NtContinue (1244336, 0, ... 01106 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01107 928 NtContinue (1244336, 0, ... 01108 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01109 928 NtContinue (1244336, 0, ... 01110 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01111 928 NtContinue (1244336, 0, ... 01112 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01113 928 NtContinue (1244336, 0, ... 01114 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01115 928 NtContinue (1244336, 0, ... 01116 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01117 928 NtContinue (1244336, 0, ... 01118 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01119 928 NtContinue (1244336, 0, ... 01120 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01121 928 NtContinue (1244336, 0, ... 01122 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01123 928 NtContinue (1244336, 0, ... 01124 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01125 928 NtContinue (1244336, 0, ... 01126 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01127 928 NtContinue (1244336, 0, ... 01128 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01129 928 NtContinue (1244336, 0, ... 01130 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01131 928 NtContinue (1244336, 0, ... 01132 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01133 928 NtContinue (1244336, 0, ... 01134 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01135 928 NtContinue (1244336, 0, ... 01136 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01137 928 NtContinue (1244336, 0, ... 01138 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01139 928 NtContinue (1244336, 0, ... 01140 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01141 928 NtContinue (1244336, 0, ... 01142 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01143 928 NtContinue (1244336, 0, ... 01144 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01145 928 NtContinue (1244336, 0, ... 01146 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01147 928 NtContinue (1244336, 0, ... 01148 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01149 928 NtContinue (1244336, 0, ... 01150 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01151 928 NtContinue (1244336, 0, ... 01152 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01153 928 NtContinue (1244336, 0, ... 01154 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01155 928 NtContinue (1244336, 0, ... 01156 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01157 928 NtContinue (1244336, 0, ... 01158 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01159 928 NtContinue (1244336, 0, ... 01160 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01161 928 NtContinue (1244336, 0, ... 01162 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01163 928 NtContinue (1244336, 0, ... 01164 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01165 928 NtContinue (1244336, 0, ... 01166 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01167 928 NtContinue (1244336, 0, ... 01168 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01169 928 NtContinue (1244336, 0, ... 01170 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01171 928 NtContinue (1244336, 0, ... 01172 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01173 928 NtContinue (1244336, 0, ... 01174 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01175 928 NtContinue (1244336, 0, ... 01176 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01177 928 NtContinue (1244336, 0, ... 01178 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01179 928 NtContinue (1244336, 0, ... 01180 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01181 928 NtContinue (1244336, 0, ... 01182 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01183 928 NtContinue (1244336, 0, ... 01184 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01185 928 NtContinue (1244336, 0, ... 01186 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01187 928 NtContinue (1244336, 0, ... 01188 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01189 928 NtContinue (1244336, 0, ... 01190 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01191 928 NtContinue (1244336, 0, ... 01192 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01193 928 NtContinue (1244336, 0, ... 01194 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01195 928 NtContinue (1244336, 0, ... 01196 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01197 928 NtContinue (1244336, 0, ... 01198 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01199 928 NtContinue (1244336, 0, ... 01200 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01201 928 NtContinue (1244336, 0, ... 01202 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01203 928 NtContinue (1244336, 0, ... 01204 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01205 928 NtContinue (1244336, 0, ... 01206 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01207 928 NtContinue (1244336, 0, ... 01208 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01209 928 NtContinue (1244336, 0, ... 01210 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01211 928 NtContinue (1244336, 0, ... 01212 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01213 928 NtContinue (1244336, 0, ... 01214 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01215 928 NtContinue (1244336, 0, ... 01216 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01217 928 NtContinue (1244336, 0, ... 01218 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01219 928 NtContinue (1244336, 0, ... 01220 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01221 928 NtContinue (1244336, 0, ... 01222 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01223 928 NtContinue (1244336, 0, ... 01224 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01225 928 NtContinue (1244336, 0, ... 01226 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01227 928 NtContinue (1244336, 0, ... 01228 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01229 928 NtContinue (1244336, 0, ... 01230 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01231 928 NtContinue (1244336, 0, ... 01232 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01233 928 NtContinue (1244336, 0, ... 01234 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01235 928 NtContinue (1244336, 0, ... 01236 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01237 928 NtContinue (1244336, 0, ... 01238 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01239 928 NtContinue (1244336, 0, ... 01240 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01241 928 NtContinue (1244336, 0, ... 01242 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01243 928 NtContinue (1244336, 0, ... 01244 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01245 928 NtContinue (1244336, 0, ... 01246 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01247 928 NtContinue (1244336, 0, ... 01248 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01249 928 NtContinue (1244336, 0, ... 01250 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01251 928 NtContinue (1244336, 0, ... 01252 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01253 928 NtContinue (1244336, 0, ... 01254 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01255 928 NtContinue (1244336, 0, ... 01256 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01257 928 NtContinue (1244336, 0, ... 01258 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01259 928 NtContinue (1244336, 0, ... 01260 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01261 928 NtContinue (1244336, 0, ... 01262 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01263 928 NtContinue (1244336, 0, ... 01264 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01265 928 NtContinue (1244336, 0, ... 01266 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01267 928 NtContinue (1244336, 0, ... 01268 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01269 928 NtContinue (1244336, 0, ... 01270 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01271 928 NtContinue (1244336, 0, ... 01272 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01273 928 NtContinue (1244336, 0, ... 01274 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01275 928 NtContinue (1244336, 0, ... 01276 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01277 928 NtContinue (1244336, 0, ... 01278 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01279 928 NtContinue (1244336, 0, ... 01280 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01281 928 NtContinue (1244336, 0, ... 01282 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01283 928 NtContinue (1244336, 0, ... 01284 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01285 928 NtContinue (1244336, 0, ... 01286 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01287 928 NtContinue (1244336, 0, ... 01288 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01289 928 NtContinue (1244336, 0, ... 01290 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01291 928 NtContinue (1244336, 0, ... 01292 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01293 928 NtContinue (1244336, 0, ... 01294 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01295 928 NtContinue (1244336, 0, ... 01296 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01297 928 NtContinue (1244336, 0, ... 01298 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01299 928 NtContinue (1244336, 0, ... 01300 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01301 928 NtContinue (1244336, 0, ... 01302 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01303 928 NtContinue (1244336, 0, ... 01304 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01305 928 NtContinue (1244336, 0, ... 01306 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01307 928 NtContinue (1244336, 0, ... 01308 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01309 928 NtContinue (1244336, 0, ... 01310 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01311 928 NtContinue (1244336, 0, ... 01312 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01313 928 NtContinue (1244336, 0, ... 01314 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01315 928 NtContinue (1244336, 0, ... 01316 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01317 928 NtContinue (1244336, 0, ... 01318 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01319 928 NtContinue (1244336, 0, ... 01320 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01321 928 NtContinue (1244336, 0, ... 01322 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01323 928 NtContinue (1244336, 0, ... 01324 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01325 928 NtContinue (1244336, 0, ... 01326 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01327 928 NtContinue (1244336, 0, ... 01328 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01329 928 NtContinue (1244336, 0, ... 01330 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01331 928 NtContinue (1244336, 0, ... 01332 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01333 928 NtContinue (1244336, 0, ... 01334 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01335 928 NtContinue (1244336, 0, ... 01336 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01337 928 NtContinue (1244336, 0, ... 01338 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01339 928 NtContinue (1244336, 0, ... 01340 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01341 928 NtContinue (1244336, 0, ... 01342 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01343 928 NtContinue (1244336, 0, ... 01344 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01345 928 NtContinue (1244336, 0, ... 01346 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01347 928 NtContinue (1244336, 0, ... 01348 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01349 928 NtContinue (1244336, 0, ... 01350 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01351 928 NtContinue (1244336, 0, ... 01352 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01353 928 NtContinue (1244336, 0, ... 01354 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01355 928 NtContinue (1244336, 0, ... 01356 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01357 928 NtContinue (1244336, 0, ... 01358 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01359 928 NtContinue (1244336, 0, ... 01360 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01361 928 NtContinue (1244336, 0, ... 01362 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01363 928 NtContinue (1244336, 0, ... 01364 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01365 928 NtContinue (1244336, 0, ... 01366 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01367 928 NtContinue (1244336, 0, ... 01368 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01369 928 NtContinue (1244336, 0, ... 01370 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01371 928 NtContinue (1244336, 0, ... 01372 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01373 928 NtContinue (1244336, 0, ... 01374 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01375 928 NtContinue (1244336, 0, ... 01376 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01377 928 NtContinue (1244336, 0, ... 01378 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01379 928 NtContinue (1244336, 0, ... 01380 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01381 928 NtContinue (1244336, 0, ... 01382 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01383 928 NtContinue (1244336, 0, ... 01384 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01385 928 NtContinue (1244336, 0, ... 01386 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01387 928 NtContinue (1244336, 0, ... 01388 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01389 928 NtContinue (1244336, 0, ... 01390 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01391 928 NtContinue (1244336, 0, ... 01392 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01393 928 NtContinue (1244336, 0, ... 01394 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01395 928 NtContinue (1244336, 0, ... 01396 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01397 928 NtContinue (1244336, 0, ... 01398 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01399 928 NtContinue (1244336, 0, ... 01400 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01401 928 NtContinue (1244336, 0, ... 01402 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01403 928 NtContinue (1244336, 0, ... 01404 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01405 928 NtContinue (1244336, 0, ... 01406 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01407 928 NtContinue (1244336, 0, ... 01408 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01409 928 NtContinue (1244336, 0, ... 01410 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01411 928 NtContinue (1244336, 0, ... 01412 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01413 928 NtContinue (1244336, 0, ... 01414 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01415 928 NtContinue (1244336, 0, ... 01416 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01417 928 NtContinue (1244336, 0, ... 01418 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01419 928 NtContinue (1244336, 0, ... 01420 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01421 928 NtContinue (1244336, 0, ... 01422 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01423 928 NtContinue (1244336, 0, ... 01424 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01425 928 NtContinue (1244336, 0, ... 01426 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01427 928 NtContinue (1244336, 0, ... 01428 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01429 928 NtContinue (1244336, 0, ... 01430 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01431 928 NtContinue (1244336, 0, ... 01432 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01433 928 NtContinue (1244336, 0, ... 01434 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01435 928 NtContinue (1244336, 0, ... 01436 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01437 928 NtContinue (1244336, 0, ... 01438 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01439 928 NtContinue (1244336, 0, ... 01440 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01441 928 NtContinue (1244336, 0, ... 01442 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01443 928 NtContinue (1244336, 0, ... 01444 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01445 928 NtContinue (1244336, 0, ... 01446 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01447 928 NtContinue (1244336, 0, ... 01448 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01449 928 NtContinue (1244336, 0, ... 01450 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01451 928 NtContinue (1244336, 0, ... 01452 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01453 928 NtContinue (1244336, 0, ... 01454 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01455 928 NtContinue (1244336, 0, ... 01456 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01457 928 NtContinue (1244336, 0, ... 01458 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01459 928 NtContinue (1244336, 0, ... 01460 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01461 928 NtContinue (1244336, 0, ... 01462 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01463 928 NtContinue (1244336, 0, ... 01464 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01465 928 NtContinue (1244336, 0, ... 01466 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01467 928 NtContinue (1244336, 0, ... 01468 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01469 928 NtContinue (1244336, 0, ... 01470 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01471 928 NtContinue (1244336, 0, ... 01472 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01473 928 NtContinue (1244336, 0, ... 01474 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01475 928 NtContinue (1244336, 0, ... 01476 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01477 928 NtContinue (1244336, 0, ... 01478 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01479 928 NtContinue (1244336, 0, ... 01480 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01481 928 NtContinue (1244336, 0, ... 01482 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01483 928 NtContinue (1244336, 0, ... 01484 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01485 928 NtContinue (1244336, 0, ... 01486 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01487 928 NtContinue (1244336, 0, ... 01488 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01489 928 NtContinue (1244336, 0, ... 01490 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01491 928 NtContinue (1244336, 0, ... 01492 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01493 928 NtContinue (1244336, 0, ... 01494 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01495 928 NtContinue (1244336, 0, ... 01496 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01497 928 NtContinue (1244336, 0, ... 01498 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01499 928 NtContinue (1244336, 0, ... 01500 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01501 928 NtContinue (1244336, 0, ... 01502 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01503 928 NtContinue (1244336, 0, ... 01504 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01505 928 NtContinue (1244336, 0, ... 01506 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01507 928 NtContinue (1244336, 0, ... 01508 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01509 928 NtContinue (1244336, 0, ... 01510 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01511 928 NtContinue (1244336, 0, ... 01512 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01513 928 NtContinue (1244336, 0, ... 01514 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01515 928 NtContinue (1244336, 0, ... 01516 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01517 928 NtContinue (1244336, 0, ... 01518 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01519 928 NtContinue (1244336, 0, ... 01520 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01521 928 NtContinue (1244336, 0, ... 01522 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01523 928 NtContinue (1244336, 0, ... 01524 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01525 928 NtContinue (1244336, 0, ... 01526 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01527 928 NtContinue (1244336, 0, ... 01528 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01529 928 NtContinue (1244336, 0, ... 01530 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01531 928 NtContinue (1244336, 0, ... 01532 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01533 928 NtContinue (1244336, 0, ... 01534 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01535 928 NtContinue (1244336, 0, ... 01536 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01537 928 NtContinue (1244336, 0, ... 01538 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01539 928 NtContinue (1244336, 0, ... 01540 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01541 928 NtContinue (1244336, 0, ... 01542 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01543 928 NtContinue (1244336, 0, ... 01544 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01545 928 NtContinue (1244336, 0, ... 01546 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01547 928 NtContinue (1244336, 0, ... 01548 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01549 928 NtContinue (1244336, 0, ... 01550 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01551 928 NtContinue (1244336, 0, ... 01552 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01553 928 NtContinue (1244336, 0, ... 01554 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01555 928 NtContinue (1244336, 0, ... 01556 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01557 928 NtContinue (1244336, 0, ... 01558 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01559 928 NtContinue (1244336, 0, ... 01560 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01561 928 NtContinue (1244336, 0, ... 01562 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01563 928 NtContinue (1244336, 0, ... 01564 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01565 928 NtContinue (1244336, 0, ... 01566 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01567 928 NtContinue (1244336, 0, ... 01568 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01569 928 NtContinue (1244336, 0, ... 01570 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01571 928 NtContinue (1244336, 0, ... 01572 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01573 928 NtContinue (1244336, 0, ... 01574 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01575 928 NtContinue (1244336, 0, ... 01576 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01577 928 NtContinue (1244336, 0, ... 01578 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01579 928 NtContinue (1244336, 0, ... 01580 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01581 928 NtContinue (1244336, 0, ... 01582 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01583 928 NtContinue (1244336, 0, ... 01584 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01585 928 NtContinue (1244336, 0, ... 01586 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01587 928 NtContinue (1244336, 0, ... 01588 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01589 928 NtContinue (1244336, 0, ... 01590 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01591 928 NtContinue (1244336, 0, ... 01592 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01593 928 NtContinue (1244336, 0, ... 01594 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01595 928 NtContinue (1244336, 0, ... 01596 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01597 928 NtContinue (1244336, 0, ... 01598 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01599 928 NtContinue (1244336, 0, ... 01600 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01601 928 NtContinue (1244336, 0, ... 01602 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01603 928 NtContinue (1244336, 0, ... 01604 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01605 928 NtContinue (1244336, 0, ... 01606 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01607 928 NtContinue (1244336, 0, ... 01608 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01609 928 NtContinue (1244336, 0, ... 01610 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01611 928 NtContinue (1244336, 0, ... 01612 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01613 928 NtContinue (1244336, 0, ... 01614 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01615 928 NtContinue (1244336, 0, ... 01616 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01617 928 NtContinue (1244336, 0, ... 01618 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01619 928 NtContinue (1244336, 0, ... 01620 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01621 928 NtContinue (1244336, 0, ... 01622 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01623 928 NtContinue (1244336, 0, ... 01624 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01625 928 NtContinue (1244336, 0, ... 01626 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01627 928 NtContinue (1244336, 0, ... 01628 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01629 928 NtContinue (1244336, 0, ... 01630 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01631 928 NtContinue (1244336, 0, ... 01632 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01633 928 NtContinue (1244336, 0, ... 01634 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01635 928 NtContinue (1244336, 0, ... 01636 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01637 928 NtContinue (1244336, 0, ... 01638 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01639 928 NtContinue (1244336, 0, ... 01640 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01641 928 NtContinue (1244336, 0, ... 01642 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01643 928 NtContinue (1244336, 0, ... 01644 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01645 928 NtContinue (1244336, 0, ... 01646 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01647 928 NtContinue (1244336, 0, ... 01648 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01649 928 NtContinue (1244336, 0, ... 01650 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01651 928 NtContinue (1244336, 0, ... 01652 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01653 928 NtContinue (1244336, 0, ... 01654 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01655 928 NtContinue (1244336, 0, ... 01656 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01657 928 NtContinue (1244336, 0, ... 01658 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01659 928 NtContinue (1244336, 0, ... 01660 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01661 928 NtContinue (1244336, 0, ... 01662 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01663 928 NtContinue (1244336, 0, ... 01664 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01665 928 NtContinue (1244336, 0, ... 01666 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01667 928 NtContinue (1244336, 0, ... 01668 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01669 928 NtContinue (1244336, 0, ... 01670 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01671 928 NtContinue (1244336, 0, ... 01672 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01673 928 NtContinue (1244336, 0, ... 01674 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01675 928 NtContinue (1244336, 0, ... 01676 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01677 928 NtContinue (1244336, 0, ... 01678 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01679 928 NtContinue (1244336, 0, ... 01680 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01681 928 NtContinue (1244336, 0, ... 01682 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01683 928 NtContinue (1244336, 0, ... 01684 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01685 928 NtContinue (1244336, 0, ... 01686 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01687 928 NtContinue (1244336, 0, ... 01688 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01689 928 NtContinue (1244336, 0, ... 01690 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01691 928 NtContinue (1244336, 0, ... 01692 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01693 928 NtContinue (1244336, 0, ... 01694 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01695 928 NtContinue (1244336, 0, ... 01696 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01697 928 NtContinue (1244336, 0, ... 01698 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01699 928 NtContinue (1244336, 0, ... 01700 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01701 928 NtContinue (1244336, 0, ... 01702 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01703 928 NtContinue (1244336, 0, ... 01704 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01705 928 NtContinue (1244336, 0, ... 01706 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01707 928 NtContinue (1244336, 0, ... 01708 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01709 928 NtContinue (1244336, 0, ... 01710 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01711 928 NtContinue (1244336, 0, ... 01712 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01713 928 NtContinue (1244336, 0, ... 01714 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01715 928 NtContinue (1244336, 0, ... 01716 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01717 928 NtContinue (1244336, 0, ... 01718 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01719 928 NtContinue (1244336, 0, ... 01720 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01721 928 NtContinue (1244336, 0, ... 01722 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01723 928 NtContinue (1244336, 0, ... 01724 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01725 928 NtContinue (1244336, 0, ... 01726 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01727 928 NtContinue (1244336, 0, ... 01728 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01729 928 NtContinue (1244336, 0, ... 01730 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01731 928 NtContinue (1244336, 0, ... 01732 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01733 928 NtContinue (1244336, 0, ... 01734 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01735 928 NtContinue (1244336, 0, ... 01736 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01737 928 NtContinue (1244336, 0, ... 01738 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01739 928 NtContinue (1244336, 0, ... 01740 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01741 928 NtContinue (1244336, 0, ... 01742 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01743 928 NtContinue (1244336, 0, ... 01744 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01745 928 NtContinue (1244336, 0, ... 01746 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01747 928 NtContinue (1244336, 0, ... 01748 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01749 928 NtContinue (1244336, 0, ... 01750 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01751 928 NtContinue (1244336, 0, ... 01752 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01753 928 NtContinue (1244336, 0, ... 01754 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01755 928 NtContinue (1244336, 0, ... 01756 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01757 928 NtContinue (1244336, 0, ... 01758 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01759 928 NtContinue (1244336, 0, ... 01760 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01761 928 NtContinue (1244336, 0, ... 01762 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01763 928 NtContinue (1244336, 0, ... 01764 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01765 928 NtContinue (1244336, 0, ... 01766 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01767 928 NtContinue (1244336, 0, ... 01768 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01769 928 NtContinue (1244336, 0, ... 01770 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01771 928 NtContinue (1244336, 0, ... 01772 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01773 928 NtContinue (1244336, 0, ... 01774 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01775 928 NtContinue (1244336, 0, ... 01776 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01777 928 NtContinue (1244336, 0, ... 01778 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01779 928 NtContinue (1244336, 0, ... 01780 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01781 928 NtContinue (1244336, 0, ... 01782 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01783 928 NtContinue (1244336, 0, ... 01784 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01785 928 NtContinue (1244336, 0, ... 01786 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01787 928 NtContinue (1244336, 0, ... 01788 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01789 928 NtContinue (1244336, 0, ... 01790 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01791 928 NtContinue (1244336, 0, ... 01792 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01793 928 NtContinue (1244336, 0, ... 01794 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01795 928 NtContinue (1244336, 0, ... 01796 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01797 928 NtContinue (1244336, 0, ... 01798 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01799 928 NtContinue (1244336, 0, ... 01800 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01801 928 NtContinue (1244336, 0, ... 01802 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01803 928 NtContinue (1244336, 0, ... 01804 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01805 928 NtContinue (1244336, 0, ... 01806 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01807 928 NtContinue (1244336, 0, ... 01808 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01809 928 NtContinue (1244336, 0, ... 01810 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01811 928 NtContinue (1244336, 0, ... 01812 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01813 928 NtContinue (1244336, 0, ... 01814 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01815 928 NtContinue (1244336, 0, ... 01816 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01817 928 NtContinue (1244336, 0, ... 01818 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01819 928 NtContinue (1244336, 0, ... 01820 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01821 928 NtContinue (1244336, 0, ... 01822 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01823 928 NtContinue (1244336, 0, ... 01824 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01825 928 NtContinue (1244336, 0, ... 01826 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01827 928 NtContinue (1244336, 0, ... 01828 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01829 928 NtContinue (1244336, 0, ... 01830 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01831 928 NtContinue (1244336, 0, ... 01832 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01833 928 NtContinue (1244336, 0, ... 01834 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01835 928 NtContinue (1244336, 0, ... 01836 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01837 928 NtContinue (1244336, 0, ... 01838 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01839 928 NtContinue (1244336, 0, ... 01840 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01841 928 NtContinue (1244336, 0, ... 01842 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01843 928 NtContinue (1244336, 0, ... 01844 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01845 928 NtContinue (1244336, 0, ... 01846 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01847 928 NtContinue (1244336, 0, ... 01848 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01849 928 NtContinue (1244336, 0, ... 01850 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01851 928 NtContinue (1244336, 0, ... 01852 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01853 928 NtContinue (1244336, 0, ... 01854 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01855 928 NtContinue (1244336, 0, ... 01856 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01857 928 NtContinue (1244336, 0, ... 01858 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01859 928 NtContinue (1244336, 0, ... 01860 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01861 928 NtContinue (1244336, 0, ... 01862 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01863 928 NtContinue (1244336, 0, ... 01864 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01865 928 NtContinue (1244336, 0, ... 01866 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01867 928 NtContinue (1244336, 0, ... 01868 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01869 928 NtContinue (1244336, 0, ... 01870 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01871 928 NtContinue (1244336, 0, ... 01872 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01873 928 NtContinue (1244336, 0, ... 01874 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01875 928 NtContinue (1244336, 0, ... 01876 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01877 928 NtContinue (1244336, 0, ... 01878 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01879 928 NtContinue (1244336, 0, ... 01880 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01881 928 NtContinue (1244336, 0, ... 01882 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01883 928 NtContinue (1244336, 0, ... 01884 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01885 928 NtContinue (1244336, 0, ... 01886 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01887 928 NtContinue (1244336, 0, ... 01888 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01889 928 NtContinue (1244336, 0, ... 01890 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01891 928 NtContinue (1244336, 0, ... 01892 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01893 928 NtContinue (1244336, 0, ... 01894 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01895 928 NtContinue (1244336, 0, ... 01896 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01897 928 NtContinue (1244336, 0, ... 01898 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01899 928 NtContinue (1244336, 0, ... 01900 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01901 928 NtContinue (1244336, 0, ... 01902 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01903 928 NtContinue (1244336, 0, ... 01904 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01905 928 NtContinue (1244336, 0, ... 01906 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01907 928 NtContinue (1244336, 0, ... 01908 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01909 928 NtContinue (1244336, 0, ... 01910 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01911 928 NtContinue (1244336, 0, ... 01912 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01913 928 NtContinue (1244336, 0, ... 01914 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01915 928 NtContinue (1244336, 0, ... 01916 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01917 928 NtContinue (1244336, 0, ... 01918 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01919 928 NtContinue (1244336, 0, ... 01920 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01921 928 NtContinue (1244336, 0, ... 01922 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01923 928 NtContinue (1244336, 0, ... 01924 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01925 928 NtContinue (1244336, 0, ... 01926 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01927 928 NtContinue (1244336, 0, ... 01928 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01929 928 NtContinue (1244336, 0, ... 01930 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01931 928 NtContinue (1244336, 0, ... 01932 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01933 928 NtContinue (1244336, 0, ... 01934 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01935 928 NtContinue (1244336, 0, ... 01936 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01937 928 NtContinue (1244336, 0, ... 01938 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01939 928 NtContinue (1244336, 0, ... 01940 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01941 928 NtContinue (1244336, 0, ... 01942 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01943 928 NtContinue (1244336, 0, ... 01944 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01945 928 NtContinue (1244336, 0, ... 01946 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01947 928 NtContinue (1244336, 0, ... 01948 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01949 928 NtContinue (1244336, 0, ... 01950 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01951 928 NtContinue (1244336, 0, ... 01952 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01953 928 NtContinue (1244336, 0, ... 01954 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01955 928 NtContinue (1244336, 0, ... 01956 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01957 928 NtContinue (1244336, 0, ... 01958 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01959 928 NtContinue (1244336, 0, ... 01960 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01961 928 NtContinue (1244336, 0, ... 01962 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01963 928 NtContinue (1244336, 0, ... 01964 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01965 928 NtContinue (1244336, 0, ... 01966 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01967 928 NtContinue (1244336, 0, ... 01968 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01969 928 NtContinue (1244336, 0, ... 01970 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01971 928 NtContinue (1244336, 0, ... 01972 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01973 928 NtContinue (1244336, 0, ... 01974 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01975 928 NtContinue (1244336, 0, ... 01976 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01977 928 NtContinue (1244336, 0, ... 01978 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01979 928 NtContinue (1244336, 0, ... 01980 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01981 928 NtContinue (1244336, 0, ... 01982 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01983 928 NtContinue (1244336, 0, ... 01984 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01985 928 NtContinue (1244336, 0, ... 01986 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01987 928 NtContinue (1244336, 0, ... 01988 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01989 928 NtContinue (1244336, 0, ... 01990 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01991 928 NtContinue (1244336, 0, ... 01992 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01993 928 NtContinue (1244336, 0, ... 01994 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01995 928 NtContinue (1244336, 0, ... 01996 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01997 928 NtContinue (1244336, 0, ... 01998 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01999 928 NtContinue (1244336, 0, ... 02000 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02001 928 NtContinue (1244336, 0, ... 02002 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02003 928 NtContinue (1244336, 0, ... 02004 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02005 928 NtContinue (1244336, 0, ... 02006 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02007 928 NtContinue (1244336, 0, ... 02008 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02009 928 NtContinue (1244336, 0, ... 02010 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02011 928 NtContinue (1244336, 0, ... 02012 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02013 928 NtContinue (1244336, 0, ... 02014 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02015 928 NtContinue (1244336, 0, ... 02016 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02017 928 NtContinue (1244336, 0, ... 02018 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02019 928 NtContinue (1244336, 0, ... 02020 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02021 928 NtContinue (1244336, 0, ... 02022 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02023 928 NtContinue (1244336, 0, ... 02024 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02025 928 NtContinue (1244336, 0, ... 02026 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02027 928 NtContinue (1244336, 0, ... 02028 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02029 928 NtContinue (1244336, 0, ... 02030 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02031 928 NtContinue (1244336, 0, ... 02032 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02033 928 NtContinue (1244336, 0, ... 02034 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02035 928 NtContinue (1244336, 0, ... 02036 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02037 928 NtContinue (1244336, 0, ... 02038 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02039 928 NtContinue (1244336, 0, ... 02040 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02041 928 NtContinue (1244336, 0, ... 02042 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02043 928 NtContinue (1244336, 0, ... 02044 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02045 928 NtContinue (1244336, 0, ... 02046 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02047 928 NtContinue (1244336, 0, ... 02048 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02049 928 NtContinue (1244336, 0, ... 02050 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02051 928 NtContinue (1244336, 0, ... 02052 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02053 928 NtContinue (1244336, 0, ... 02054 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02055 928 NtContinue (1244336, 0, ... 02056 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02057 928 NtContinue (1244336, 0, ... 02058 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02059 928 NtContinue (1244336, 0, ... 02060 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02061 928 NtContinue (1244336, 0, ... 02062 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02063 928 NtContinue (1244336, 0, ... 02064 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02065 928 NtContinue (1244336, 0, ... 02066 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02067 928 NtContinue (1244336, 0, ... 02068 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02069 928 NtContinue (1244336, 0, ... 02070 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02071 928 NtContinue (1244336, 0, ... 02072 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02073 928 NtContinue (1244336, 0, ... 02074 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02075 928 NtContinue (1244336, 0, ... 02076 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02077 928 NtContinue (1244336, 0, ... 02078 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02079 928 NtContinue (1244336, 0, ... 02080 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02081 928 NtContinue (1244336, 0, ... 02082 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02083 928 NtContinue (1244336, 0, ... 02084 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02085 928 NtContinue (1244336, 0, ... 02086 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02087 928 NtContinue (1244336, 0, ... 02088 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02089 928 NtContinue (1244336, 0, ... 02090 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02091 928 NtContinue (1244336, 0, ... 02092 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02093 928 NtContinue (1244336, 0, ... 02094 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02095 928 NtContinue (1244336, 0, ... 02096 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02097 928 NtContinue (1244336, 0, ... 02098 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02099 928 NtContinue (1244336, 0, ... 02100 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02101 928 NtContinue (1244336, 0, ... 02102 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02103 928 NtContinue (1244336, 0, ... 02104 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02105 928 NtContinue (1244336, 0, ... 02106 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02107 928 NtContinue (1244336, 0, ... 02108 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02109 928 NtContinue (1244336, 0, ... 02110 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02111 928 NtContinue (1244336, 0, ... 02112 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02113 928 NtContinue (1244336, 0, ... 02114 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02115 928 NtContinue (1244336, 0, ... 02116 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02117 928 NtContinue (1244336, 0, ... 02118 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02119 928 NtContinue (1244336, 0, ... 02120 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02121 928 NtContinue (1244336, 0, ... 02122 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02123 928 NtContinue (1244336, 0, ... 02124 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02125 928 NtContinue (1244336, 0, ... 02126 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02127 928 NtContinue (1244336, 0, ... 02128 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02129 928 NtContinue (1244336, 0, ... 02130 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02131 928 NtContinue (1244336, 0, ... 02132 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02133 928 NtContinue (1244336, 0, ... 02134 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02135 928 NtContinue (1244336, 0, ... 02136 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02137 928 NtContinue (1244336, 0, ... 02138 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02139 928 NtContinue (1244336, 0, ... 02140 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02141 928 NtContinue (1244336, 0, ... 02142 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02143 928 NtContinue (1244336, 0, ... 02144 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02145 928 NtContinue (1244336, 0, ... 02146 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02147 928 NtContinue (1244336, 0, ... 02148 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02149 928 NtContinue (1244336, 0, ... 02150 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02151 928 NtContinue (1244336, 0, ... 02152 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02153 928 NtContinue (1244336, 0, ... 02154 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02155 928 NtContinue (1244336, 0, ... 02156 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02157 928 NtContinue (1244336, 0, ... 02158 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02159 928 NtContinue (1244336, 0, ... 02160 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02161 928 NtContinue (1244336, 0, ... 02162 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02163 928 NtContinue (1244336, 0, ... 02164 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02165 928 NtContinue (1244336, 0, ... 02166 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02167 928 NtContinue (1244336, 0, ... 02168 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02169 928 NtContinue (1244336, 0, ... 02170 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02171 928 NtContinue (1244336, 0, ... 02172 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02173 928 NtContinue (1244336, 0, ... 02174 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02175 928 NtContinue (1244336, 0, ... 02176 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02177 928 NtContinue (1244336, 0, ... 02178 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02179 928 NtContinue (1244336, 0, ... 02180 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02181 928 NtContinue (1244336, 0, ... 02182 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02183 928 NtContinue (1244336, 0, ... 02184 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02185 928 NtContinue (1244336, 0, ... 02186 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02187 928 NtContinue (1244336, 0, ... 02188 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02189 928 NtContinue (1244336, 0, ... 02190 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02191 928 NtContinue (1244336, 0, ... 02192 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02193 928 NtContinue (1244336, 0, ... 02194 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02195 928 NtContinue (1244336, 0, ... 02196 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02197 928 NtContinue (1244336, 0, ... 02198 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02199 928 NtContinue (1244336, 0, ... 02200 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02201 928 NtContinue (1244336, 0, ... 02202 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02203 928 NtContinue (1244336, 0, ... 02204 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02205 928 NtContinue (1244336, 0, ... 02206 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02207 928 NtContinue (1244336, 0, ... 02208 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02209 928 NtContinue (1244336, 0, ... 02210 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02211 928 NtContinue (1244336, 0, ... 02212 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02213 928 NtContinue (1244336, 0, ... 02214 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02215 928 NtContinue (1244336, 0, ... 02216 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02217 928 NtContinue (1244336, 0, ... 02218 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02219 928 NtContinue (1244336, 0, ... 02220 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02221 928 NtContinue (1244336, 0, ... 02222 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02223 928 NtContinue (1244336, 0, ... 02224 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02225 928 NtContinue (1244336, 0, ... 02226 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02227 928 NtContinue (1244336, 0, ... 02228 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02229 928 NtContinue (1244336, 0, ... 02230 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02231 928 NtContinue (1244336, 0, ... 02232 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02233 928 NtContinue (1244336, 0, ... 02234 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02235 928 NtContinue (1244336, 0, ... 02236 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02237 928 NtContinue (1244336, 0, ... 02238 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02239 928 NtContinue (1244336, 0, ... 02240 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02241 928 NtContinue (1244336, 0, ... 02242 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02243 928 NtContinue (1244336, 0, ... 02244 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02245 928 NtContinue (1244336, 0, ... 02246 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02247 928 NtContinue (1244336, 0, ... 02248 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02249 928 NtContinue (1244336, 0, ... 02250 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02251 928 NtContinue (1244336, 0, ... 02252 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02253 928 NtContinue (1244336, 0, ... 02254 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02255 928 NtContinue (1244336, 0, ... 02256 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02257 928 NtContinue (1244336, 0, ... 02258 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02259 928 NtContinue (1244336, 0, ... 02260 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02261 928 NtContinue (1244336, 0, ... 02262 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02263 928 NtContinue (1244336, 0, ... 02264 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02265 928 NtContinue (1244336, 0, ... 02266 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02267 928 NtContinue (1244336, 0, ... 02268 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02269 928 NtContinue (1244336, 0, ... 02270 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02271 928 NtContinue (1244336, 0, ... 02272 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02273 928 NtContinue (1244336, 0, ... 02274 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02275 928 NtContinue (1244336, 0, ... 02276 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02277 928 NtContinue (1244336, 0, ... 02278 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02279 928 NtContinue (1244336, 0, ... 02280 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02281 928 NtContinue (1244336, 0, ... 02282 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02283 928 NtContinue (1244336, 0, ... 02284 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02285 928 NtContinue (1244336, 0, ... 02286 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02287 928 NtContinue (1244336, 0, ... 02288 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02289 928 NtContinue (1244336, 0, ... 02290 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02291 928 NtContinue (1244336, 0, ... 02292 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02293 928 NtContinue (1244336, 0, ... 02294 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02295 928 NtContinue (1244336, 0, ... 02296 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02297 928 NtContinue (1244336, 0, ... 02298 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02299 928 NtContinue (1244336, 0, ... 02300 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02301 928 NtContinue (1244336, 0, ... 02302 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02303 928 NtContinue (1244336, 0, ... 02304 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02305 928 NtContinue (1244336, 0, ... 02306 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02307 928 NtContinue (1244336, 0, ... 02308 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02309 928 NtContinue (1244336, 0, ... 02310 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02311 928 NtContinue (1244336, 0, ... 02312 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02313 928 NtContinue (1244336, 0, ... 02314 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02315 928 NtContinue (1244336, 0, ... 02316 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02317 928 NtContinue (1244336, 0, ... 02318 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02319 928 NtContinue (1244336, 0, ... 02320 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02321 928 NtContinue (1244336, 0, ... 02322 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02323 928 NtContinue (1244336, 0, ... 02324 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02325 928 NtContinue (1244336, 0, ... 02326 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02327 928 NtContinue (1244336, 0, ... 02328 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02329 928 NtContinue (1244336, 0, ... 02330 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02331 928 NtContinue (1244336, 0, ... 02332 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02333 928 NtContinue (1244336, 0, ... 02334 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02335 928 NtContinue (1244336, 0, ... 02336 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02337 928 NtContinue (1244336, 0, ... 02338 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02339 928 NtContinue (1244336, 0, ... 02340 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02341 928 NtContinue (1244336, 0, ... 02342 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02343 928 NtContinue (1244336, 0, ... 02344 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02345 928 NtContinue (1244336, 0, ... 02346 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02347 928 NtContinue (1244336, 0, ... 02348 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02349 928 NtContinue (1244336, 0, ... 02350 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02351 928 NtContinue (1244336, 0, ... 02352 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02353 928 NtContinue (1244336, 0, ... 02354 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02355 928 NtContinue (1244336, 0, ... 02356 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02357 928 NtContinue (1244336, 0, ... 02358 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02359 928 NtContinue (1244336, 0, ... 02360 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02361 928 NtContinue (1244336, 0, ... 02362 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02363 928 NtContinue (1244336, 0, ... 02364 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02365 928 NtContinue (1244336, 0, ... 02366 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02367 928 NtContinue (1244336, 0, ... 02368 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02369 928 NtContinue (1244336, 0, ... 02370 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02371 928 NtContinue (1244336, 0, ... 02372 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02373 928 NtContinue (1244336, 0, ... 02374 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02375 928 NtContinue (1244336, 0, ... 02376 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02377 928 NtContinue (1244336, 0, ... 02378 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02379 928 NtContinue (1244336, 0, ... 02380 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02381 928 NtContinue (1244336, 0, ... 02382 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02383 928 NtContinue (1244336, 0, ... 02384 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02385 928 NtContinue (1244336, 0, ... 02386 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02387 928 NtContinue (1244336, 0, ... 02388 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02389 928 NtContinue (1244336, 0, ... 02390 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02391 928 NtContinue (1244336, 0, ... 02392 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02393 928 NtContinue (1244336, 0, ... 02394 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02395 928 NtContinue (1244336, 0, ... 02396 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02397 928 NtContinue (1244336, 0, ... 02398 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02399 928 NtContinue (1244336, 0, ... 02400 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02401 928 NtContinue (1244336, 0, ... 02402 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02403 928 NtContinue (1244336, 0, ... 02404 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02405 928 NtContinue (1244336, 0, ... 02406 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02407 928 NtContinue (1244336, 0, ... 02408 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02409 928 NtContinue (1244336, 0, ... 02410 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02411 928 NtContinue (1244336, 0, ... 02412 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02413 928 NtContinue (1244336, 0, ... 02414 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02415 928 NtContinue (1244336, 0, ... 02416 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02417 928 NtContinue (1244336, 0, ... 02418 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02419 928 NtContinue (1244336, 0, ... 02420 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02421 928 NtContinue (1244336, 0, ... 02422 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02423 928 NtContinue (1244336, 0, ... 02424 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02425 928 NtContinue (1244336, 0, ... 02426 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02427 928 NtContinue (1244336, 0, ... 02428 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02429 928 NtContinue (1244336, 0, ... 02430 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02431 928 NtContinue (1244336, 0, ... 02432 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02433 928 NtContinue (1244336, 0, ... 02434 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02435 928 NtContinue (1244336, 0, ... 02436 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02437 928 NtContinue (1244336, 0, ... 02438 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02439 928 NtContinue (1244336, 0, ... 02440 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02441 928 NtContinue (1244336, 0, ... 02442 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02443 928 NtContinue (1244336, 0, ... 02444 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02445 928 NtContinue (1244336, 0, ... 02446 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02447 928 NtContinue (1244336, 0, ... 02448 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02449 928 NtContinue (1244336, 0, ... 02450 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02451 928 NtContinue (1244336, 0, ... 02452 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02453 928 NtContinue (1244336, 0, ... 02454 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02455 928 NtContinue (1244336, 0, ... 02456 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02457 928 NtContinue (1244336, 0, ... 02458 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02459 928 NtContinue (1244336, 0, ... 02460 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02461 928 NtContinue (1244336, 0, ... 02462 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02463 928 NtContinue (1244336, 0, ... 02464 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02465 928 NtContinue (1244336, 0, ... 02466 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02467 928 NtContinue (1244336, 0, ... 02468 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02469 928 NtContinue (1244336, 0, ... 02470 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02471 928 NtContinue (1244336, 0, ... 02472 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02473 928 NtContinue (1244336, 0, ... 02474 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02475 928 NtContinue (1244336, 0, ... 02476 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02477 928 NtContinue (1244336, 0, ... 02478 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02479 928 NtContinue (1244336, 0, ... 02480 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02481 928 NtContinue (1244336, 0, ... 02482 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02483 928 NtContinue (1244336, 0, ... 02484 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02485 928 NtContinue (1244336, 0, ... 02486 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02487 928 NtContinue (1244336, 0, ... 02488 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02489 928 NtContinue (1244336, 0, ... 02490 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02491 928 NtContinue (1244336, 0, ... 02492 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02493 928 NtContinue (1244336, 0, ... 02494 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02495 928 NtContinue (1244336, 0, ... 02496 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02497 928 NtContinue (1244336, 0, ... 02498 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02499 928 NtContinue (1244336, 0, ... 02500 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02501 928 NtContinue (1244336, 0, ... 02502 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02503 928 NtContinue (1244336, 0, ... 02504 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02505 928 NtContinue (1244336, 0, ... 02506 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02507 928 NtContinue (1244336, 0, ... 02508 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02509 928 NtContinue (1244336, 0, ... 02510 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02511 928 NtContinue (1244336, 0, ... 02512 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02513 928 NtContinue (1244336, 0, ... 02514 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02515 928 NtContinue (1244336, 0, ... 02516 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02517 928 NtContinue (1244336, 0, ... 02518 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02519 928 NtContinue (1244336, 0, ... 02520 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02521 928 NtContinue (1244336, 0, ... 02522 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02523 928 NtContinue (1244336, 0, ... 02524 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02525 928 NtContinue (1244336, 0, ... 02526 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02527 928 NtContinue (1244336, 0, ... 02528 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02529 928 NtContinue (1244336, 0, ... 02530 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02531 928 NtContinue (1244336, 0, ... 02532 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02533 928 NtContinue (1244336, 0, ... 02534 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02535 928 NtContinue (1244336, 0, ... 02536 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02537 928 NtContinue (1244336, 0, ... 02538 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02539 928 NtContinue (1244336, 0, ... 02540 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02541 928 NtContinue (1244336, 0, ... 02542 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02543 928 NtContinue (1244336, 0, ... 02544 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02545 928 NtContinue (1244336, 0, ... 02546 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02547 928 NtContinue (1244336, 0, ... 02548 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02549 928 NtContinue (1244336, 0, ... 02550 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02551 928 NtContinue (1244336, 0, ... 02552 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02553 928 NtContinue (1244336, 0, ... 02554 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02555 928 NtContinue (1244336, 0, ... 02556 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02557 928 NtContinue (1244336, 0, ... 02558 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02559 928 NtContinue (1244336, 0, ... 02560 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02561 928 NtContinue (1244336, 0, ... 02562 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02563 928 NtContinue (1244336, 0, ... 02564 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02565 928 NtContinue (1244336, 0, ... 02566 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02567 928 NtContinue (1244336, 0, ... 02568 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02569 928 NtContinue (1244336, 0, ... 02570 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02571 928 NtContinue (1244336, 0, ... 02572 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02573 928 NtContinue (1244336, 0, ... 02574 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02575 928 NtContinue (1244336, 0, ... 02576 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02577 928 NtContinue (1244336, 0, ... 02578 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02579 928 NtContinue (1244336, 0, ... 02580 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02581 928 NtContinue (1244336, 0, ... 02582 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02583 928 NtContinue (1244336, 0, ... 02584 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02585 928 NtContinue (1244336, 0, ... 02586 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02587 928 NtContinue (1244336, 0, ... 02588 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02589 928 NtContinue (1244336, 0, ... 02590 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02591 928 NtContinue (1244336, 0, ... 02592 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02593 928 NtContinue (1244336, 0, ... 02594 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02595 928 NtContinue (1244336, 0, ... 02596 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02597 928 NtContinue (1244336, 0, ... 02598 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02599 928 NtContinue (1244336, 0, ... 02600 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02601 928 NtContinue (1244336, 0, ... 02602 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02603 928 NtContinue (1244336, 0, ... 02604 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02605 928 NtContinue (1244336, 0, ... 02606 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02607 928 NtContinue (1244336, 0, ... 02608 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02609 928 NtContinue (1244336, 0, ... 02610 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02611 928 NtContinue (1244336, 0, ... 02612 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02613 928 NtContinue (1244336, 0, ... 02614 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02615 928 NtContinue (1244336, 0, ... 02616 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02617 928 NtContinue (1244336, 0, ... 02618 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02619 928 NtContinue (1244336, 0, ... 02620 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02621 928 NtContinue (1244336, 0, ... 02622 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02623 928 NtContinue (1244336, 0, ... 02624 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02625 928 NtContinue (1244336, 0, ... 02626 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02627 928 NtContinue (1244336, 0, ... 02628 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02629 928 NtContinue (1244336, 0, ... 02630 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02631 928 NtContinue (1244336, 0, ... 02632 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02633 928 NtContinue (1244336, 0, ... 02634 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02635 928 NtContinue (1244336, 0, ... 02636 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02637 928 NtContinue (1244336, 0, ... 02638 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02639 928 NtContinue (1244336, 0, ... 02640 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02641 928 NtContinue (1244336, 0, ... 02642 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02643 928 NtContinue (1244336, 0, ... 02644 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02645 928 NtContinue (1244336, 0, ... 02646 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02647 928 NtContinue (1244336, 0, ... 02648 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02649 928 NtContinue (1244336, 0, ... 02650 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02651 928 NtContinue (1244336, 0, ... 02652 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02653 928 NtContinue (1244336, 0, ... 02654 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02655 928 NtContinue (1244336, 0, ... 02656 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02657 928 NtContinue (1244336, 0, ... 02658 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02659 928 NtContinue (1244336, 0, ... 02660 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02661 928 NtContinue (1244336, 0, ... 02662 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02663 928 NtContinue (1244336, 0, ... 02664 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02665 928 NtContinue (1244336, 0, ... 02666 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02667 928 NtContinue (1244336, 0, ... 02668 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02669 928 NtContinue (1244336, 0, ... 02670 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02671 928 NtContinue (1244336, 0, ... 02672 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02673 928 NtContinue (1244336, 0, ... 02674 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02675 928 NtContinue (1244336, 0, ... 02676 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02677 928 NtContinue (1244336, 0, ... 02678 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02679 928 NtContinue (1244336, 0, ... 02680 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02681 928 NtContinue (1244336, 0, ... 02682 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02683 928 NtContinue (1244336, 0, ... 02684 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02685 928 NtContinue (1244336, 0, ... 02686 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02687 928 NtContinue (1244336, 0, ... 02688 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02689 928 NtContinue (1244336, 0, ... 02690 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02691 928 NtContinue (1244336, 0, ... 02692 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02693 928 NtContinue (1244336, 0, ... 02694 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02695 928 NtContinue (1244336, 0, ... 02696 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02697 928 NtContinue (1244336, 0, ... 02698 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02699 928 NtContinue (1244336, 0, ... 02700 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02701 928 NtContinue (1244336, 0, ... 02702 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02703 928 NtContinue (1244336, 0, ... 02704 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02705 928 NtContinue (1244336, 0, ... 02706 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02707 928 NtContinue (1244336, 0, ... 02708 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02709 928 NtContinue (1244336, 0, ... 02710 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02711 928 NtContinue (1244336, 0, ... 02712 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02713 928 NtContinue (1244336, 0, ... 02714 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02715 928 NtContinue (1244336, 0, ... 02716 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02717 928 NtContinue (1244336, 0, ... 02718 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02719 928 NtContinue (1244336, 0, ... 02720 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02721 928 NtContinue (1244336, 0, ... 02722 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02723 928 NtContinue (1244336, 0, ... 02724 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02725 928 NtContinue (1244336, 0, ... 02726 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02727 928 NtContinue (1244336, 0, ... 02728 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02729 928 NtContinue (1244336, 0, ... 02730 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02731 928 NtContinue (1244336, 0, ... 02732 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02733 928 NtContinue (1244336, 0, ... 02734 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02735 928 NtContinue (1244336, 0, ... 02736 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02737 928 NtContinue (1244336, 0, ... 02738 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02739 928 NtContinue (1244336, 0, ... 02740 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02741 928 NtContinue (1244336, 0, ... 02742 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02743 928 NtContinue (1244336, 0, ... 02744 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02745 928 NtContinue (1244336, 0, ... 02746 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02747 928 NtContinue (1244336, 0, ... 02748 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02749 928 NtContinue (1244336, 0, ... 02750 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02751 928 NtContinue (1244336, 0, ... 02752 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02753 928 NtContinue (1244336, 0, ... 02754 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02755 928 NtContinue (1244336, 0, ... 02756 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02757 928 NtContinue (1244336, 0, ... 02758 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02759 928 NtContinue (1244336, 0, ... 02760 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02761 928 NtContinue (1244336, 0, ... 02762 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02763 928 NtContinue (1244336, 0, ... 02764 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02765 928 NtContinue (1244336, 0, ... 02766 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02767 928 NtContinue (1244336, 0, ... 02768 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02769 928 NtContinue (1244336, 0, ... 02770 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02771 928 NtContinue (1244336, 0, ... 02772 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02773 928 NtContinue (1244336, 0, ... 02774 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02775 928 NtContinue (1244336, 0, ... 02776 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02777 928 NtContinue (1244336, 0, ... 02778 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02779 928 NtContinue (1244336, 0, ... 02780 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02781 928 NtContinue (1244336, 0, ... 02782 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02783 928 NtContinue (1244336, 0, ... 02784 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02785 928 NtContinue (1244336, 0, ... 02786 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02787 928 NtContinue (1244336, 0, ... 02788 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02789 928 NtContinue (1244336, 0, ... 02790 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02791 928 NtContinue (1244336, 0, ... 02792 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02793 928 NtContinue (1244336, 0, ... 02794 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02795 928 NtContinue (1244336, 0, ... 02796 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02797 928 NtContinue (1244336, 0, ... 02798 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02799 928 NtContinue (1244336, 0, ... 02800 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02801 928 NtContinue (1244336, 0, ... 02802 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02803 928 NtContinue (1244336, 0, ... 02804 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02805 928 NtContinue (1244336, 0, ... 02806 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02807 928 NtContinue (1244336, 0, ... 02808 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02809 928 NtContinue (1244336, 0, ... 02810 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02811 928 NtContinue (1244336, 0, ... 02812 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02813 928 NtContinue (1244336, 0, ... 02814 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02815 928 NtContinue (1244336, 0, ... 02816 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02817 928 NtContinue (1244336, 0, ... 02818 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02819 928 NtContinue (1244336, 0, ... 02820 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02821 928 NtContinue (1244336, 0, ... 02822 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02823 928 NtContinue (1244336, 0, ... 02824 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02825 928 NtContinue (1244336, 0, ... 02826 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02827 928 NtContinue (1244336, 0, ... 02828 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02829 928 NtContinue (1244336, 0, ... 02830 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02831 928 NtContinue (1244336, 0, ... 02832 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02833 928 NtContinue (1244336, 0, ... 02834 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02835 928 NtContinue (1244336, 0, ... 02836 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02837 928 NtContinue (1244336, 0, ... 02838 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02839 928 NtContinue (1244336, 0, ... 02840 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02841 928 NtContinue (1244336, 0, ... 02842 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02843 928 NtContinue (1244336, 0, ... 02844 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02845 928 NtContinue (1244336, 0, ... 02846 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02847 928 NtContinue (1244336, 0, ... 02848 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02849 928 NtContinue (1244336, 0, ... 02850 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02851 928 NtContinue (1244336, 0, ... 02852 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02853 928 NtContinue (1244336, 0, ... 02854 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02855 928 NtContinue (1244336, 0, ... 02856 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02857 928 NtContinue (1244336, 0, ... 02858 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02859 928 NtContinue (1244336, 0, ... 02860 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02861 928 NtContinue (1244336, 0, ... 02862 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02863 928 NtContinue (1244336, 0, ... 02864 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02865 928 NtContinue (1244336, 0, ... 02866 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02867 928 NtContinue (1244336, 0, ... 02868 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02869 928 NtContinue (1244336, 0, ... 02870 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02871 928 NtContinue (1244336, 0, ... 02872 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02873 928 NtContinue (1244336, 0, ... 02874 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02875 928 NtContinue (1244336, 0, ... 02876 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02877 928 NtContinue (1244336, 0, ... 02878 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02879 928 NtContinue (1244336, 0, ... 02880 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02881 928 NtContinue (1244336, 0, ... 02882 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02883 928 NtContinue (1244336, 0, ... 02884 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02885 928 NtContinue (1244336, 0, ... 02886 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02887 928 NtContinue (1244336, 0, ... 02888 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02889 928 NtContinue (1244336, 0, ... 02890 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02891 928 NtContinue (1244336, 0, ... 02892 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02893 928 NtContinue (1244336, 0, ... 02894 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02895 928 NtContinue (1244336, 0, ... 02896 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02897 928 NtContinue (1244336, 0, ... 02898 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02899 928 NtContinue (1244336, 0, ... 02900 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02901 928 NtContinue (1244336, 0, ... 02902 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02903 928 NtContinue (1244336, 0, ... 02904 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02905 928 NtContinue (1244336, 0, ... 02906 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02907 928 NtContinue (1244336, 0, ... 02908 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02909 928 NtContinue (1244336, 0, ... 02910 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02911 928 NtContinue (1244336, 0, ... 02912 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02913 928 NtContinue (1244336, 0, ... 02914 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02915 928 NtContinue (1244336, 0, ... 02916 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02917 928 NtContinue (1244336, 0, ... 02918 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02919 928 NtContinue (1244336, 0, ... 02920 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02921 928 NtContinue (1244336, 0, ... 02922 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02923 928 NtContinue (1244336, 0, ... 02924 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02925 928 NtContinue (1244336, 0, ... 02926 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02927 928 NtContinue (1244336, 0, ... 02928 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02929 928 NtContinue (1244336, 0, ... 02930 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02931 928 NtContinue (1244336, 0, ... 02932 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02933 928 NtContinue (1244336, 0, ... 02934 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02935 928 NtContinue (1244336, 0, ... 02936 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02937 928 NtContinue (1244336, 0, ... 02938 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02939 928 NtContinue (1244336, 0, ... 02940 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02941 928 NtContinue (1244336, 0, ... 02942 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02943 928 NtContinue (1244336, 0, ... 02944 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02945 928 NtContinue (1244336, 0, ... 02946 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02947 928 NtContinue (1244336, 0, ... 02948 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02949 928 NtContinue (1244336, 0, ... 02950 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02951 928 NtContinue (1244336, 0, ... 02952 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02953 928 NtContinue (1244336, 0, ... 02954 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02955 928 NtContinue (1244336, 0, ... 02956 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02957 928 NtContinue (1244336, 0, ... 02958 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02959 928 NtContinue (1244336, 0, ... 02960 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02961 928 NtContinue (1244336, 0, ... 02962 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02963 928 NtContinue (1244336, 0, ... 02964 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02965 928 NtContinue (1244336, 0, ... 02966 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02967 928 NtContinue (1244336, 0, ... 02968 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02969 928 NtContinue (1244336, 0, ... 02970 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02971 928 NtContinue (1244336, 0, ... 02972 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02973 928 NtContinue (1244336, 0, ... 02974 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02975 928 NtContinue (1244336, 0, ... 02976 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02977 928 NtContinue (1244336, 0, ... 02978 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02979 928 NtContinue (1244336, 0, ... 02980 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02981 928 NtContinue (1244336, 0, ... 02982 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02983 928 NtContinue (1244336, 0, ... 02984 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02985 928 NtContinue (1244336, 0, ... 02986 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02987 928 NtContinue (1244336, 0, ... 02988 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02989 928 NtContinue (1244336, 0, ... 02990 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02991 928 NtContinue (1244336, 0, ... 02992 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02993 928 NtContinue (1244336, 0, ... 02994 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02995 928 NtContinue (1244336, 0, ... 02996 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02997 928 NtContinue (1244336, 0, ... 02998 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02999 928 NtContinue (1244336, 0, ... 03000 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03001 928 NtContinue (1244336, 0, ... 03002 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03003 928 NtContinue (1244336, 0, ... 03004 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03005 928 NtContinue (1244336, 0, ... 03006 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03007 928 NtContinue (1244336, 0, ... 03008 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03009 928 NtContinue (1244336, 0, ... 03010 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03011 928 NtContinue (1244336, 0, ... 03012 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03013 928 NtContinue (1244336, 0, ... 03014 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03015 928 NtContinue (1244336, 0, ... 03016 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03017 928 NtContinue (1244336, 0, ... 03018 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03019 928 NtContinue (1244336, 0, ... 03020 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03021 928 NtContinue (1244336, 0, ... 03022 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03023 928 NtContinue (1244336, 0, ... 03024 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03025 928 NtContinue (1244336, 0, ... 03026 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03027 928 NtContinue (1244336, 0, ... 03028 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03029 928 NtContinue (1244336, 0, ... 03030 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03031 928 NtContinue (1244336, 0, ... 03032 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03033 928 NtContinue (1244336, 0, ... 03034 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03035 928 NtContinue (1244336, 0, ... 03036 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03037 928 NtContinue (1244336, 0, ... 03038 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03039 928 NtContinue (1244336, 0, ... 03040 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03041 928 NtContinue (1244336, 0, ... 03042 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03043 928 NtContinue (1244336, 0, ... 03044 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03045 928 NtContinue (1244336, 0, ... 03046 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03047 928 NtContinue (1244336, 0, ... 03048 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03049 928 NtContinue (1244336, 0, ... 03050 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03051 928 NtContinue (1244336, 0, ... 03052 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03053 928 NtContinue (1244336, 0, ... 03054 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03055 928 NtContinue (1244336, 0, ... 03056 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03057 928 NtContinue (1244336, 0, ... 03058 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03059 928 NtContinue (1244336, 0, ... 03060 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03061 928 NtContinue (1244336, 0, ... 03062 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03063 928 NtContinue (1244336, 0, ... 03064 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03065 928 NtContinue (1244336, 0, ... 03066 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03067 928 NtContinue (1244336, 0, ... 03068 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03069 928 NtContinue (1244336, 0, ... 03070 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03071 928 NtContinue (1244336, 0, ... 03072 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03073 928 NtContinue (1244336, 0, ... 03074 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03075 928 NtContinue (1244336, 0, ... 03076 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03077 928 NtContinue (1244336, 0, ... 03078 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03079 928 NtContinue (1244336, 0, ... 03080 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03081 928 NtContinue (1244336, 0, ... 03082 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03083 928 NtContinue (1244336, 0, ... 03084 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03085 928 NtContinue (1244336, 0, ... 03086 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03087 928 NtContinue (1244336, 0, ... 03088 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03089 928 NtContinue (1244336, 0, ... 03090 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03091 928 NtContinue (1244336, 0, ... 03092 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03093 928 NtContinue (1244336, 0, ... 03094 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03095 928 NtContinue (1244336, 0, ... 03096 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03097 928 NtContinue (1244336, 0, ... 03098 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03099 928 NtContinue (1244336, 0, ... 03100 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03101 928 NtContinue (1244336, 0, ... 03102 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03103 928 NtContinue (1244336, 0, ... 03104 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03105 928 NtContinue (1244336, 0, ... 03106 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03107 928 NtContinue (1244336, 0, ... 03108 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03109 928 NtContinue (1244336, 0, ... 03110 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03111 928 NtContinue (1244336, 0, ... 03112 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03113 928 NtContinue (1244336, 0, ... 03114 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03115 928 NtContinue (1244336, 0, ... 03116 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03117 928 NtContinue (1244336, 0, ... 03118 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03119 928 NtContinue (1244336, 0, ... 03120 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03121 928 NtContinue (1244336, 0, ... 03122 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03123 928 NtContinue (1244336, 0, ... 03124 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03125 928 NtContinue (1244336, 0, ... 03126 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03127 928 NtContinue (1244336, 0, ... 03128 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03129 928 NtContinue (1244336, 0, ... 03130 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03131 928 NtContinue (1244336, 0, ... 03132 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03133 928 NtContinue (1244336, 0, ... 03134 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03135 928 NtContinue (1244336, 0, ... 03136 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03137 928 NtContinue (1244336, 0, ... 03138 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03139 928 NtContinue (1244336, 0, ... 03140 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03141 928 NtContinue (1244336, 0, ... 03142 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03143 928 NtContinue (1244336, 0, ... 03144 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03145 928 NtContinue (1244336, 0, ... 03146 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03147 928 NtContinue (1244336, 0, ... 03148 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03149 928 NtContinue (1244336, 0, ... 03150 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03151 928 NtContinue (1244336, 0, ... 03152 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03153 928 NtContinue (1244336, 0, ... 03154 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03155 928 NtContinue (1244336, 0, ... 03156 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03157 928 NtContinue (1244336, 0, ... 03158 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03159 928 NtContinue (1244336, 0, ... 03160 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03161 928 NtContinue (1244336, 0, ... 03162 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03163 928 NtContinue (1244336, 0, ... 03164 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03165 928 NtContinue (1244336, 0, ... 03166 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03167 928 NtContinue (1244336, 0, ... 03168 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03169 928 NtContinue (1244336, 0, ... 03170 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03171 928 NtContinue (1244336, 0, ... 03172 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03173 928 NtContinue (1244336, 0, ... 03174 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03175 928 NtContinue (1244336, 0, ... 03176 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03177 928 NtContinue (1244336, 0, ... 03178 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03179 928 NtContinue (1244336, 0, ... 03180 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03181 928 NtContinue (1244336, 0, ... 03182 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03183 928 NtContinue (1244336, 0, ... 03184 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03185 928 NtContinue (1244336, 0, ... 03186 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03187 928 NtContinue (1244336, 0, ... 03188 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03189 928 NtContinue (1244336, 0, ... 03190 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03191 928 NtContinue (1244336, 0, ... 03192 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03193 928 NtContinue (1244336, 0, ... 03194 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03195 928 NtContinue (1244336, 0, ... 03196 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03197 928 NtContinue (1244336, 0, ... 03198 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03199 928 NtContinue (1244336, 0, ... 03200 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03201 928 NtContinue (1244336, 0, ... 03202 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03203 928 NtContinue (1244336, 0, ... 03204 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03205 928 NtContinue (1244336, 0, ... 03206 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03207 928 NtContinue (1244336, 0, ... 03208 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03209 928 NtContinue (1244336, 0, ... 03210 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03211 928 NtContinue (1244336, 0, ... 03212 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03213 928 NtContinue (1244336, 0, ... 03214 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03215 928 NtContinue (1244336, 0, ... 03216 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03217 928 NtContinue (1244336, 0, ... 03218 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03219 928 NtContinue (1244336, 0, ... 03220 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03221 928 NtContinue (1244336, 0, ... 03222 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03223 928 NtContinue (1244336, 0, ... 03224 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03225 928 NtContinue (1244336, 0, ... 03226 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03227 928 NtContinue (1244336, 0, ... 03228 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03229 928 NtContinue (1244336, 0, ... 03230 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03231 928 NtContinue (1244336, 0, ... 03232 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03233 928 NtContinue (1244336, 0, ... 03234 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03235 928 NtContinue (1244336, 0, ... 03236 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03237 928 NtContinue (1244336, 0, ... 03238 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03239 928 NtContinue (1244336, 0, ... 03240 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03241 928 NtContinue (1244336, 0, ... 03242 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03243 928 NtContinue (1244336, 0, ... 03244 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03245 928 NtContinue (1244336, 0, ... 03246 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03247 928 NtContinue (1244336, 0, ... 03248 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03249 928 NtContinue (1244336, 0, ... 03250 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03251 928 NtContinue (1244336, 0, ... 03252 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03253 928 NtContinue (1244336, 0, ... 03254 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03255 928 NtContinue (1244336, 0, ... 03256 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03257 928 NtContinue (1244336, 0, ... 03258 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03259 928 NtContinue (1244336, 0, ... 03260 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03261 928 NtContinue (1244336, 0, ... 03262 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03263 928 NtContinue (1244336, 0, ... 03264 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03265 928 NtContinue (1244336, 0, ... 03266 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03267 928 NtContinue (1244336, 0, ... 03268 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03269 928 NtContinue (1244336, 0, ... 03270 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03271 928 NtContinue (1244336, 0, ... 03272 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03273 928 NtContinue (1244336, 0, ... 03274 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03275 928 NtContinue (1244336, 0, ... 03276 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03277 928 NtContinue (1244336, 0, ... 03278 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03279 928 NtContinue (1244336, 0, ... 03280 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03281 928 NtContinue (1244336, 0, ... 03282 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03283 928 NtContinue (1244336, 0, ... 03284 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03285 928 NtContinue (1244336, 0, ... 03286 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03287 928 NtContinue (1244336, 0, ... 03288 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03289 928 NtContinue (1244336, 0, ... 03290 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03291 928 NtContinue (1244336, 0, ... 03292 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03293 928 NtContinue (1244336, 0, ... 03294 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03295 928 NtContinue (1244336, 0, ... 03296 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03297 928 NtContinue (1244336, 0, ... 03298 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03299 928 NtContinue (1244336, 0, ... 03300 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03301 928 NtContinue (1244336, 0, ... 03302 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03303 928 NtContinue (1244336, 0, ... 03304 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03305 928 NtContinue (1244336, 0, ... 03306 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03307 928 NtContinue (1244336, 0, ... 03308 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03309 928 NtContinue (1244336, 0, ... 03310 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03311 928 NtContinue (1244336, 0, ... 03312 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03313 928 NtContinue (1244336, 0, ... 03314 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03315 928 NtContinue (1244336, 0, ... 03316 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03317 928 NtContinue (1244336, 0, ... 03318 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03319 928 NtContinue (1244336, 0, ... 03320 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03321 928 NtContinue (1244336, 0, ... 03322 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03323 928 NtContinue (1244336, 0, ... 03324 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03325 928 NtContinue (1244336, 0, ... 03326 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03327 928 NtContinue (1244336, 0, ... 03328 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03329 928 NtContinue (1244336, 0, ... 03330 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03331 928 NtContinue (1244336, 0, ... 03332 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03333 928 NtContinue (1244336, 0, ... 03334 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03335 928 NtContinue (1244336, 0, ... 03336 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03337 928 NtContinue (1244336, 0, ... 03338 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03339 928 NtContinue (1244336, 0, ... 03340 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03341 928 NtContinue (1244336, 0, ... 03342 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03343 928 NtContinue (1244336, 0, ... 03344 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03345 928 NtContinue (1244336, 0, ... 03346 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03347 928 NtContinue (1244336, 0, ... 03348 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03349 928 NtContinue (1244336, 0, ... 03350 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03351 928 NtContinue (1244336, 0, ... 03352 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03353 928 NtContinue (1244336, 0, ... 03354 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03355 928 NtContinue (1244336, 0, ... 03356 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03357 928 NtContinue (1244336, 0, ... 03358 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03359 928 NtContinue (1244336, 0, ... 03360 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03361 928 NtContinue (1244336, 0, ... 03362 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03363 928 NtContinue (1244336, 0, ... 03364 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03365 928 NtContinue (1244336, 0, ... 03366 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03367 928 NtContinue (1244336, 0, ... 03368 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03369 928 NtContinue (1244336, 0, ... 03370 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03371 928 NtContinue (1244336, 0, ... 03372 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03373 928 NtContinue (1244336, 0, ... 03374 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03375 928 NtContinue (1244336, 0, ... 03376 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03377 928 NtContinue (1244336, 0, ... 03378 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03379 928 NtContinue (1244336, 0, ... 03380 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03381 928 NtContinue (1244336, 0, ... 03382 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03383 928 NtContinue (1244336, 0, ... 03384 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03385 928 NtContinue (1244336, 0, ... 03386 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03387 928 NtContinue (1244336, 0, ... 03388 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03389 928 NtContinue (1244336, 0, ... 03390 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03391 928 NtContinue (1244336, 0, ... 03392 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03393 928 NtContinue (1244336, 0, ... 03394 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03395 928 NtContinue (1244336, 0, ... 03396 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03397 928 NtContinue (1244336, 0, ... 03398 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03399 928 NtContinue (1244336, 0, ... 03400 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03401 928 NtContinue (1244336, 0, ... 03402 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03403 928 NtContinue (1244336, 0, ... 03404 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03405 928 NtContinue (1244336, 0, ... 03406 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03407 928 NtContinue (1244336, 0, ... 03408 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03409 928 NtContinue (1244336, 0, ... 03410 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03411 928 NtContinue (1244336, 0, ... 03412 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03413 928 NtContinue (1244336, 0, ... 03414 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03415 928 NtContinue (1244336, 0, ... 03416 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03417 928 NtContinue (1244336, 0, ... 03418 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03419 928 NtContinue (1244336, 0, ... 03420 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03421 928 NtContinue (1244336, 0, ... 03422 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03423 928 NtContinue (1244336, 0, ... 03424 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03425 928 NtContinue (1244336, 0, ... 03426 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03427 928 NtContinue (1244336, 0, ... 03428 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03429 928 NtContinue (1244336, 0, ... 03430 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03431 928 NtContinue (1244336, 0, ... 03432 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03433 928 NtContinue (1244336, 0, ... 03434 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03435 928 NtContinue (1244336, 0, ... 03436 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03437 928 NtContinue (1244336, 0, ... 03438 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03439 928 NtContinue (1244336, 0, ... 03440 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03441 928 NtContinue (1244336, 0, ... 03442 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03443 928 NtContinue (1244336, 0, ... 03444 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03445 928 NtContinue (1244336, 0, ... 03446 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03447 928 NtContinue (1244336, 0, ... 03448 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03449 928 NtContinue (1244336, 0, ... 03450 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03451 928 NtContinue (1244336, 0, ... 03452 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03453 928 NtContinue (1244336, 0, ... 03454 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03455 928 NtContinue (1244336, 0, ... 03456 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03457 928 NtContinue (1244336, 0, ... 03458 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03459 928 NtContinue (1244336, 0, ... 03460 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03461 928 NtContinue (1244336, 0, ... 03462 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03463 928 NtContinue (1244336, 0, ... 03464 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03465 928 NtContinue (1244336, 0, ... 03466 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03467 928 NtContinue (1244336, 0, ... 03468 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03469 928 NtContinue (1244336, 0, ... 03470 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03471 928 NtContinue (1244336, 0, ... 03472 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03473 928 NtContinue (1244336, 0, ... 03474 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03475 928 NtContinue (1244336, 0, ... 03476 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03477 928 NtContinue (1244336, 0, ... 03478 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03479 928 NtContinue (1244336, 0, ... 03480 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03481 928 NtContinue (1244336, 0, ... 03482 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03483 928 NtContinue (1244336, 0, ... 03484 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03485 928 NtContinue (1244336, 0, ... 03486 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03487 928 NtContinue (1244336, 0, ... 03488 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03489 928 NtContinue (1244336, 0, ... 03490 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03491 928 NtContinue (1244336, 0, ... 03492 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03493 928 NtContinue (1244336, 0, ... 03494 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03495 928 NtContinue (1244336, 0, ... 03496 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03497 928 NtContinue (1244336, 0, ... 03498 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03499 928 NtContinue (1244336, 0, ... 03500 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03501 928 NtContinue (1244336, 0, ... 03502 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03503 928 NtContinue (1244336, 0, ... 03504 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03505 928 NtContinue (1244336, 0, ... 03506 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03507 928 NtContinue (1244336, 0, ... 03508 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03509 928 NtContinue (1244336, 0, ... 03510 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03511 928 NtContinue (1244336, 0, ... 03512 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03513 928 NtContinue (1244336, 0, ... 03514 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03515 928 NtContinue (1244336, 0, ... 03516 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03517 928 NtContinue (1244336, 0, ... 03518 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03519 928 NtContinue (1244336, 0, ... 03520 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03521 928 NtContinue (1244336, 0, ... 03522 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03523 928 NtContinue (1244336, 0, ... 03524 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03525 928 NtContinue (1244336, 0, ... 03526 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03527 928 NtContinue (1244336, 0, ... 03528 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03529 928 NtContinue (1244336, 0, ... 03530 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03531 928 NtContinue (1244336, 0, ... 03532 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03533 928 NtContinue (1244336, 0, ... 03534 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03535 928 NtContinue (1244336, 0, ... 03536 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03537 928 NtContinue (1244336, 0, ... 03538 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03539 928 NtContinue (1244336, 0, ... 03540 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03541 928 NtContinue (1244336, 0, ... 03542 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03543 928 NtContinue (1244336, 0, ... 03544 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03545 928 NtContinue (1244336, 0, ... 03546 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03547 928 NtContinue (1244336, 0, ... 03548 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03549 928 NtContinue (1244336, 0, ... 03550 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03551 928 NtContinue (1244336, 0, ... 03552 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03553 928 NtContinue (1244336, 0, ... 03554 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03555 928 NtContinue (1244336, 0, ... 03556 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03557 928 NtContinue (1244336, 0, ... 03558 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03559 928 NtContinue (1244336, 0, ... 03560 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03561 928 NtContinue (1244336, 0, ... 03562 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03563 928 NtContinue (1244336, 0, ... 03564 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03565 928 NtContinue (1244336, 0, ... 03566 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03567 928 NtContinue (1244336, 0, ... 03568 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03569 928 NtContinue (1244336, 0, ... 03570 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03571 928 NtContinue (1244336, 0, ... 03572 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03573 928 NtContinue (1244336, 0, ... 03574 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03575 928 NtContinue (1244336, 0, ... 03576 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03577 928 NtContinue (1244336, 0, ... 03578 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03579 928 NtContinue (1244336, 0, ... 03580 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03581 928 NtContinue (1244336, 0, ... 03582 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03583 928 NtContinue (1244336, 0, ... 03584 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03585 928 NtContinue (1244336, 0, ... 03586 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03587 928 NtContinue (1244336, 0, ... 03588 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03589 928 NtContinue (1244336, 0, ... 03590 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03591 928 NtContinue (1244336, 0, ... 03592 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03593 928 NtContinue (1244336, 0, ... 03594 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03595 928 NtContinue (1244336, 0, ... 03596 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03597 928 NtContinue (1244336, 0, ... 03598 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03599 928 NtContinue (1244336, 0, ... 03600 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03601 928 NtContinue (1244336, 0, ... 03602 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03603 928 NtContinue (1244336, 0, ... 03604 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03605 928 NtContinue (1244336, 0, ... 03606 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03607 928 NtContinue (1244336, 0, ... 03608 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03609 928 NtContinue (1244336, 0, ... 03610 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03611 928 NtContinue (1244336, 0, ... 03612 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03613 928 NtContinue (1244336, 0, ... 03614 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03615 928 NtContinue (1244336, 0, ... 03616 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03617 928 NtContinue (1244336, 0, ... 03618 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03619 928 NtContinue (1244336, 0, ... 03620 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03621 928 NtContinue (1244336, 0, ... 03622 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03623 928 NtContinue (1244336, 0, ... 03624 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03625 928 NtContinue (1244336, 0, ... 03626 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03627 928 NtContinue (1244336, 0, ... 03628 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03629 928 NtContinue (1244336, 0, ... 03630 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03631 928 NtContinue (1244336, 0, ... 03632 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03633 928 NtContinue (1244336, 0, ... 03634 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03635 928 NtContinue (1244336, 0, ... 03636 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03637 928 NtContinue (1244336, 0, ... 03638 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03639 928 NtContinue (1244336, 0, ... 03640 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03641 928 NtContinue (1244336, 0, ... 03642 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03643 928 NtContinue (1244336, 0, ... 03644 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03645 928 NtContinue (1244336, 0, ... 03646 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03647 928 NtContinue (1244336, 0, ... 03648 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03649 928 NtContinue (1244336, 0, ... 03650 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03651 928 NtContinue (1244336, 0, ... 03652 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03653 928 NtContinue (1244336, 0, ... 03654 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03655 928 NtContinue (1244336, 0, ... 03656 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03657 928 NtContinue (1244336, 0, ... 03658 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03659 928 NtContinue (1244336, 0, ... 03660 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03661 928 NtContinue (1244336, 0, ... 03662 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03663 928 NtContinue (1244336, 0, ... 03664 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03665 928 NtContinue (1244336, 0, ... 03666 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03667 928 NtContinue (1244336, 0, ... 03668 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03669 928 NtContinue (1244336, 0, ... 03670 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03671 928 NtContinue (1244336, 0, ... 03672 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03673 928 NtContinue (1244336, 0, ... 03674 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03675 928 NtContinue (1244336, 0, ... 03676 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03677 928 NtContinue (1244336, 0, ... 03678 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03679 928 NtContinue (1244336, 0, ... 03680 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03681 928 NtContinue (1244336, 0, ... 03682 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03683 928 NtContinue (1244336, 0, ... 03684 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03685 928 NtContinue (1244336, 0, ... 03686 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03687 928 NtContinue (1244336, 0, ... 03688 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03689 928 NtContinue (1244336, 0, ... 03690 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03691 928 NtContinue (1244336, 0, ... 03692 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03693 928 NtContinue (1244336, 0, ... 03694 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03695 928 NtContinue (1244336, 0, ... 03696 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03697 928 NtContinue (1244336, 0, ... 03698 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03699 928 NtContinue (1244336, 0, ... 03700 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03701 928 NtContinue (1244336, 0, ... 03702 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03703 928 NtContinue (1244336, 0, ... 03704 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03705 928 NtContinue (1244336, 0, ... 03706 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03707 928 NtContinue (1244336, 0, ... 03708 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03709 928 NtContinue (1244336, 0, ... 03710 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03711 928 NtContinue (1244336, 0, ... 03712 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03713 928 NtContinue (1244336, 0, ... 03714 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03715 928 NtContinue (1244336, 0, ... 03716 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03717 928 NtContinue (1244336, 0, ... 03718 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03719 928 NtContinue (1244336, 0, ... 03720 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03721 928 NtContinue (1244336, 0, ... 03722 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03723 928 NtContinue (1244336, 0, ... 03724 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03725 928 NtContinue (1244336, 0, ... 03726 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03727 928 NtContinue (1244336, 0, ... 03728 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03729 928 NtContinue (1244336, 0, ... 03730 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03731 928 NtContinue (1244336, 0, ... 03732 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03733 928 NtContinue (1244336, 0, ... 03734 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03735 928 NtContinue (1244336, 0, ... 03736 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03737 928 NtContinue (1244336, 0, ... 03738 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03739 928 NtContinue (1244336, 0, ... 03740 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03741 928 NtContinue (1244336, 0, ... 03742 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03743 928 NtContinue (1244336, 0, ... 03744 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03745 928 NtContinue (1244336, 0, ... 03746 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03747 928 NtContinue (1244336, 0, ... 03748 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03749 928 NtContinue (1244336, 0, ... 03750 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03751 928 NtContinue (1244336, 0, ... 03752 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03753 928 NtContinue (1244336, 0, ... 03754 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03755 928 NtContinue (1244336, 0, ... 03756 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03757 928 NtContinue (1244336, 0, ... 03758 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03759 928 NtContinue (1244336, 0, ... 03760 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03761 928 NtContinue (1244336, 0, ... 03762 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03763 928 NtContinue (1244336, 0, ... 03764 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03765 928 NtContinue (1244336, 0, ... 03766 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03767 928 NtContinue (1244336, 0, ... 03768 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03769 928 NtContinue (1244336, 0, ... 03770 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03771 928 NtContinue (1244336, 0, ... 03772 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03773 928 NtContinue (1244336, 0, ... 03774 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03775 928 NtContinue (1244336, 0, ... 03776 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03777 928 NtContinue (1244336, 0, ... 03778 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03779 928 NtContinue (1244336, 0, ... 03780 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03781 928 NtContinue (1244336, 0, ... 03782 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03783 928 NtContinue (1244336, 0, ... 03784 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03785 928 NtContinue (1244336, 0, ... 03786 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03787 928 NtContinue (1244336, 0, ... 03788 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03789 928 NtContinue (1244336, 0, ... 03790 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03791 928 NtContinue (1244336, 0, ... 03792 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03793 928 NtContinue (1244336, 0, ... 03794 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03795 928 NtContinue (1244336, 0, ... 03796 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03797 928 NtContinue (1244336, 0, ... 03798 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03799 928 NtContinue (1244336, 0, ... 03800 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03801 928 NtContinue (1244336, 0, ... 03802 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03803 928 NtContinue (1244336, 0, ... 03804 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03805 928 NtContinue (1244336, 0, ... 03806 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03807 928 NtContinue (1244336, 0, ... 03808 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03809 928 NtContinue (1244336, 0, ... 03810 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03811 928 NtContinue (1244336, 0, ... 03812 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03813 928 NtContinue (1244336, 0, ... 03814 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03815 928 NtContinue (1244336, 0, ... 03816 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03817 928 NtContinue (1244336, 0, ... 03818 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03819 928 NtContinue (1244336, 0, ... 03820 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03821 928 NtContinue (1244336, 0, ... 03822 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03823 928 NtContinue (1244336, 0, ... 03824 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03825 928 NtContinue (1244336, 0, ... 03826 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03827 928 NtContinue (1244336, 0, ... 03828 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03829 928 NtContinue (1244336, 0, ... 03830 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03831 928 NtContinue (1244336, 0, ... 03832 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03833 928 NtContinue (1244336, 0, ... 03834 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03835 928 NtContinue (1244336, 0, ... 03836 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03837 928 NtContinue (1244336, 0, ... 03838 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03839 928 NtContinue (1244336, 0, ... 03840 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03841 928 NtContinue (1244336, 0, ... 03842 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03843 928 NtContinue (1244336, 0, ... 03844 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03845 928 NtContinue (1244336, 0, ... 03846 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03847 928 NtContinue (1244336, 0, ... 03848 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03849 928 NtContinue (1244336, 0, ... 03850 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03851 928 NtContinue (1244336, 0, ... 03852 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03853 928 NtContinue (1244336, 0, ... 03854 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03855 928 NtContinue (1244336, 0, ... 03856 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03857 928 NtContinue (1244336, 0, ... 03858 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03859 928 NtContinue (1244336, 0, ... 03860 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03861 928 NtContinue (1244336, 0, ... 03862 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03863 928 NtContinue (1244336, 0, ... 03864 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03865 928 NtContinue (1244336, 0, ... 03866 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03867 928 NtContinue (1244336, 0, ... 03868 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03869 928 NtContinue (1244336, 0, ... 03870 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03871 928 NtContinue (1244336, 0, ... 03872 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03873 928 NtContinue (1244336, 0, ... 03874 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03875 928 NtContinue (1244336, 0, ... 03876 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03877 928 NtContinue (1244336, 0, ... 03878 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03879 928 NtContinue (1244336, 0, ... 03880 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03881 928 NtContinue (1244336, 0, ... 03882 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03883 928 NtContinue (1244336, 0, ... 03884 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03885 928 NtContinue (1244336, 0, ... 03886 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03887 928 NtContinue (1244336, 0, ... 03888 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03889 928 NtContinue (1244336, 0, ... 03890 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03891 928 NtContinue (1244336, 0, ... 03892 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03893 928 NtContinue (1244336, 0, ... 03894 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03895 928 NtContinue (1244336, 0, ... 03896 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03897 928 NtContinue (1244336, 0, ... 03898 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03899 928 NtContinue (1244336, 0, ... 03900 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03901 928 NtContinue (1244336, 0, ... 03902 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03903 928 NtContinue (1244336, 0, ... 03904 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03905 928 NtContinue (1244336, 0, ... 03906 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03907 928 NtContinue (1244336, 0, ... 03908 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03909 928 NtContinue (1244336, 0, ... 03910 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03911 928 NtContinue (1244336, 0, ... 03912 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03913 928 NtContinue (1244336, 0, ... 03914 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03915 928 NtContinue (1244336, 0, ... 03916 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03917 928 NtContinue (1244336, 0, ... 03918 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03919 928 NtContinue (1244336, 0, ... 03920 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03921 928 NtContinue (1244336, 0, ... 03922 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03923 928 NtContinue (1244336, 0, ... 03924 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03925 928 NtContinue (1244336, 0, ... 03926 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03927 928 NtContinue (1244336, 0, ... 03928 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03929 928 NtContinue (1244336, 0, ... 03930 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03931 928 NtContinue (1244336, 0, ... 03932 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03933 928 NtContinue (1244336, 0, ... 03934 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03935 928 NtContinue (1244336, 0, ... 03936 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03937 928 NtContinue (1244336, 0, ... 03938 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03939 928 NtContinue (1244336, 0, ... 03940 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03941 928 NtContinue (1244336, 0, ... 03942 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03943 928 NtContinue (1244336, 0, ... 03944 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03945 928 NtContinue (1244336, 0, ... 03946 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03947 928 NtContinue (1244336, 0, ... 03948 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03949 928 NtContinue (1244336, 0, ... 03950 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03951 928 NtContinue (1244336, 0, ... 03952 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03953 928 NtContinue (1244336, 0, ... 03954 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03955 928 NtContinue (1244336, 0, ... 03956 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03957 928 NtContinue (1244336, 0, ... 03958 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03959 928 NtContinue (1244336, 0, ... 03960 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03961 928 NtContinue (1244336, 0, ... 03962 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03963 928 NtContinue (1244336, 0, ... 03964 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03965 928 NtContinue (1244336, 0, ... 03966 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03967 928 NtContinue (1244336, 0, ... 03968 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03969 928 NtContinue (1244336, 0, ... 03970 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03971 928 NtContinue (1244336, 0, ... 03972 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03973 928 NtContinue (1244336, 0, ... 03974 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03975 928 NtContinue (1244336, 0, ... 03976 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03977 928 NtContinue (1244336, 0, ... 03978 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03979 928 NtContinue (1244336, 0, ... 03980 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03981 928 NtContinue (1244336, 0, ... 03982 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03983 928 NtContinue (1244336, 0, ... 03984 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03985 928 NtContinue (1244336, 0, ... 03986 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03987 928 NtContinue (1244336, 0, ... 03988 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03989 928 NtContinue (1244336, 0, ... 03990 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03991 928 NtContinue (1244336, 0, ... 03992 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03993 928 NtContinue (1244336, 0, ... 03994 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03995 928 NtContinue (1244336, 0, ... 03996 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03997 928 NtContinue (1244336, 0, ... 03998 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03999 928 NtContinue (1244336, 0, ... 04000 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04001 928 NtContinue (1244336, 0, ... 04002 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04003 928 NtContinue (1244336, 0, ... 04004 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04005 928 NtContinue (1244336, 0, ... 04006 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04007 928 NtContinue (1244336, 0, ... 04008 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04009 928 NtContinue (1244336, 0, ... 04010 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04011 928 NtContinue (1244336, 0, ... 04012 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04013 928 NtContinue (1244336, 0, ... 04014 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04015 928 NtContinue (1244336, 0, ... 04016 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04017 928 NtContinue (1244336, 0, ... 04018 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04019 928 NtContinue (1244336, 0, ... 04020 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04021 928 NtContinue (1244336, 0, ... 04022 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04023 928 NtContinue (1244336, 0, ... 04024 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04025 928 NtContinue (1244336, 0, ... 04026 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04027 928 NtContinue (1244336, 0, ... 04028 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04029 928 NtContinue (1244336, 0, ... 04030 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04031 928 NtContinue (1244336, 0, ... 04032 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04033 928 NtContinue (1244336, 0, ... 04034 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04035 928 NtContinue (1244336, 0, ... 04036 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04037 928 NtContinue (1244336, 0, ... 04038 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04039 928 NtContinue (1244336, 0, ... 04040 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04041 928 NtContinue (1244336, 0, ... 04042 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04043 928 NtContinue (1244336, 0, ... 04044 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04045 928 NtContinue (1244336, 0, ... 04046 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04047 928 NtContinue (1244336, 0, ... 04048 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04049 928 NtContinue (1244336, 0, ... 04050 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04051 928 NtContinue (1244336, 0, ... 04052 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04053 928 NtContinue (1244336, 0, ... 04054 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04055 928 NtContinue (1244336, 0, ... 04056 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04057 928 NtContinue (1244336, 0, ... 04058 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04059 928 NtContinue (1244336, 0, ... 04060 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04061 928 NtContinue (1244336, 0, ... 04062 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04063 928 NtContinue (1244336, 0, ... 04064 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04065 928 NtContinue (1244336, 0, ... 04066 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04067 928 NtContinue (1244336, 0, ... 04068 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04069 928 NtContinue (1244336, 0, ... 04070 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04071 928 NtContinue (1244336, 0, ... 04072 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04073 928 NtContinue (1244336, 0, ... 04074 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04075 928 NtContinue (1244336, 0, ... 04076 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04077 928 NtContinue (1244336, 0, ... 04078 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04079 928 NtContinue (1244336, 0, ... 04080 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04081 928 NtContinue (1244336, 0, ... 04082 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04083 928 NtContinue (1244336, 0, ... 04084 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04085 928 NtContinue (1244336, 0, ... 04086 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04087 928 NtContinue (1244336, 0, ... 04088 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04089 928 NtContinue (1244336, 0, ... 04090 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04091 928 NtContinue (1244336, 0, ... 04092 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04093 928 NtContinue (1244336, 0, ... 04094 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04095 928 NtContinue (1244336, 0, ... 04096 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04097 928 NtContinue (1244336, 0, ... 04098 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04099 928 NtContinue (1244336, 0, ... 04100 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04101 928 NtContinue (1244336, 0, ... 04102 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04103 928 NtContinue (1244336, 0, ... 04104 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04105 928 NtContinue (1244336, 0, ... 04106 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04107 928 NtContinue (1244336, 0, ... 04108 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04109 928 NtContinue (1244336, 0, ... 04110 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04111 928 NtContinue (1244336, 0, ... 04112 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04113 928 NtContinue (1244336, 0, ... 04114 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04115 928 NtContinue (1244336, 0, ... 04116 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04117 928 NtContinue (1244336, 0, ... 04118 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04119 928 NtContinue (1244336, 0, ... 04120 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04121 928 NtContinue (1244336, 0, ... 04122 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04123 928 NtContinue (1244336, 0, ... 04124 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04125 928 NtContinue (1244336, 0, ... 04126 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04127 928 NtContinue (1244336, 0, ... 04128 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04129 928 NtContinue (1244336, 0, ... 04130 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04131 928 NtContinue (1244336, 0, ... 04132 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04133 928 NtContinue (1244336, 0, ... 04134 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04135 928 NtContinue (1244336, 0, ... 04136 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04137 928 NtContinue (1244336, 0, ... 04138 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04139 928 NtContinue (1244336, 0, ... 04140 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04141 928 NtContinue (1244336, 0, ... 04142 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04143 928 NtContinue (1244336, 0, ... 04144 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04145 928 NtContinue (1244336, 0, ... 04146 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04147 928 NtContinue (1244336, 0, ... 04148 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04149 928 NtContinue (1244336, 0, ... 04150 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04151 928 NtContinue (1244336, 0, ... 04152 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04153 928 NtContinue (1244336, 0, ... 04154 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04155 928 NtContinue (1244336, 0, ... 04156 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04157 928 NtContinue (1244336, 0, ... 04158 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04159 928 NtContinue (1244336, 0, ... 04160 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04161 928 NtContinue (1244336, 0, ... 04162 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04163 928 NtContinue (1244336, 0, ... 04164 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04165 928 NtContinue (1244336, 0, ... 04166 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04167 928 NtContinue (1244336, 0, ... 04168 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04169 928 NtContinue (1244336, 0, ... 04170 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04171 928 NtContinue (1244336, 0, ... 04172 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04173 928 NtContinue (1244336, 0, ... 04174 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04175 928 NtContinue (1244336, 0, ... 04176 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04177 928 NtContinue (1244336, 0, ... 04178 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04179 928 NtContinue (1244336, 0, ... 04180 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04181 928 NtContinue (1244336, 0, ... 04182 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04183 928 NtContinue (1244336, 0, ... 04184 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04185 928 NtContinue (1244336, 0, ... 04186 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04187 928 NtContinue (1244336, 0, ... 04188 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04189 928 NtContinue (1244336, 0, ... 04190 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04191 928 NtContinue (1244336, 0, ... 04192 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04193 928 NtContinue (1244336, 0, ... 04194 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04195 928 NtContinue (1244336, 0, ... 04196 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04197 928 NtContinue (1244336, 0, ... 04198 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04199 928 NtContinue (1244336, 0, ... 04200 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04201 928 NtContinue (1244336, 0, ... 04202 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04203 928 NtContinue (1244336, 0, ... 04204 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04205 928 NtContinue (1244336, 0, ... 04206 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04207 928 NtContinue (1244336, 0, ... 04208 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04209 928 NtContinue (1244336, 0, ... 04210 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04211 928 NtContinue (1244336, 0, ... 04212 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04213 928 NtContinue (1244336, 0, ... 04214 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04215 928 NtContinue (1244336, 0, ... 04216 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04217 928 NtContinue (1244336, 0, ... 04218 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04219 928 NtContinue (1244336, 0, ... 04220 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04221 928 NtContinue (1244336, 0, ... 04222 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04223 928 NtContinue (1244336, 0, ... 04224 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04225 928 NtContinue (1244336, 0, ... 04226 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04227 928 NtContinue (1244336, 0, ... 04228 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04229 928 NtContinue (1244336, 0, ... 04230 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04231 928 NtContinue (1244336, 0, ... 04232 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04233 928 NtContinue (1244336, 0, ... 04234 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04235 928 NtContinue (1244336, 0, ... 04236 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04237 928 NtContinue (1244336, 0, ... 04238 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04239 928 NtContinue (1244336, 0, ... 04240 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04241 928 NtContinue (1244336, 0, ... 04242 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04243 928 NtContinue (1244336, 0, ... 04244 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04245 928 NtContinue (1244336, 0, ... 04246 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04247 928 NtContinue (1244336, 0, ... 04248 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04249 928 NtContinue (1244336, 0, ... 04250 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04251 928 NtContinue (1244336, 0, ... 04252 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04253 928 NtContinue (1244336, 0, ... 04254 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04255 928 NtContinue (1244336, 0, ... 04256 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04257 928 NtContinue (1244336, 0, ... 04258 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04259 928 NtContinue (1244336, 0, ... 04260 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04261 928 NtContinue (1244336, 0, ... 04262 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04263 928 NtContinue (1244336, 0, ... 04264 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04265 928 NtContinue (1244336, 0, ... 04266 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04267 928 NtContinue (1244336, 0, ... 04268 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04269 928 NtContinue (1244336, 0, ... 04270 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04271 928 NtContinue (1244336, 0, ... 04272 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04273 928 NtContinue (1244336, 0, ... 04274 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04275 928 NtContinue (1244336, 0, ... 04276 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04277 928 NtContinue (1244336, 0, ... 04278 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04279 928 NtContinue (1244336, 0, ... 04280 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04281 928 NtContinue (1244336, 0, ... 04282 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04283 928 NtContinue (1244336, 0, ... 04284 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04285 928 NtContinue (1244336, 0, ... 04286 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04287 928 NtContinue (1244336, 0, ... 04288 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04289 928 NtContinue (1244336, 0, ... 04290 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04291 928 NtContinue (1244336, 0, ... 04292 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04293 928 NtContinue (1244336, 0, ... 04294 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04295 928 NtContinue (1244336, 0, ... 04296 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04297 928 NtContinue (1244336, 0, ... 04298 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04299 928 NtContinue (1244336, 0, ... 04300 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04301 928 NtContinue (1244336, 0, ... 04302 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04303 928 NtContinue (1244336, 0, ... 04304 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04305 928 NtContinue (1244336, 0, ... 04306 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04307 928 NtContinue (1244336, 0, ... 04308 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04309 928 NtContinue (1244336, 0, ... 04310 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04311 928 NtContinue (1244336, 0, ... 04312 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04313 928 NtContinue (1244336, 0, ... 04314 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04315 928 NtContinue (1244336, 0, ... 04316 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04317 928 NtContinue (1244336, 0, ... 04318 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04319 928 NtContinue (1244336, 0, ... 04320 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04321 928 NtContinue (1244336, 0, ... 04322 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04323 928 NtContinue (1244336, 0, ... 04324 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04325 928 NtContinue (1244336, 0, ... 04326 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04327 928 NtContinue (1244336, 0, ... 04328 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04329 928 NtContinue (1244336, 0, ... 04330 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04331 928 NtContinue (1244336, 0, ... 04332 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04333 928 NtContinue (1244336, 0, ... 04334 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04335 928 NtContinue (1244336, 0, ... 04336 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04337 928 NtContinue (1244336, 0, ... 04338 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04339 928 NtContinue (1244336, 0, ... 04340 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04341 928 NtContinue (1244336, 0, ... 04342 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04343 928 NtContinue (1244336, 0, ... 04344 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04345 928 NtContinue (1244336, 0, ... 04346 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04347 928 NtContinue (1244336, 0, ... 04348 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04349 928 NtContinue (1244336, 0, ... 04350 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04351 928 NtContinue (1244336, 0, ... 04352 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04353 928 NtContinue (1244336, 0, ... 04354 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04355 928 NtContinue (1244336, 0, ... 04356 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04357 928 NtContinue (1244336, 0, ... 04358 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04359 928 NtContinue (1244336, 0, ... 04360 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04361 928 NtContinue (1244336, 0, ... 04362 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04363 928 NtContinue (1244336, 0, ... 04364 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04365 928 NtContinue (1244336, 0, ... 04366 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04367 928 NtContinue (1244336, 0, ... 04368 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04369 928 NtContinue (1244336, 0, ... 04370 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04371 928 NtContinue (1244336, 0, ... 04372 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04373 928 NtContinue (1244336, 0, ... 04374 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04375 928 NtContinue (1244336, 0, ... 04376 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04377 928 NtContinue (1244336, 0, ... 04378 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04379 928 NtContinue (1244336, 0, ... 04380 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04381 928 NtContinue (1244336, 0, ... 04382 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04383 928 NtContinue (1244336, 0, ... 04384 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04385 928 NtContinue (1244336, 0, ... 04386 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04387 928 NtContinue (1244336, 0, ... 04388 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04389 928 NtContinue (1244336, 0, ... 04390 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04391 928 NtContinue (1244336, 0, ... 04392 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04393 928 NtContinue (1244336, 0, ... 04394 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04395 928 NtContinue (1244336, 0, ... 04396 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04397 928 NtContinue (1244336, 0, ... 04398 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04399 928 NtContinue (1244336, 0, ... 04400 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04401 928 NtContinue (1244336, 0, ... 04402 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04403 928 NtContinue (1244336, 0, ... 04404 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04405 928 NtContinue (1244336, 0, ... 04406 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04407 928 NtContinue (1244336, 0, ... 04408 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04409 928 NtContinue (1244336, 0, ... 04410 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04411 928 NtContinue (1244336, 0, ... 04412 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04413 928 NtContinue (1244336, 0, ... 04414 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04415 928 NtContinue (1244336, 0, ... 04416 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04417 928 NtContinue (1244336, 0, ... 04418 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04419 928 NtContinue (1244336, 0, ... 04420 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04421 928 NtContinue (1244336, 0, ... 04422 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04423 928 NtContinue (1244336, 0, ... 04424 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04425 928 NtContinue (1244336, 0, ... 04426 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04427 928 NtContinue (1244336, 0, ... 04428 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04429 928 NtContinue (1244336, 0, ... 04430 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04431 928 NtContinue (1244336, 0, ... 04432 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04433 928 NtContinue (1244336, 0, ... 04434 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04435 928 NtContinue (1244336, 0, ... 04436 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04437 928 NtContinue (1244336, 0, ... 04438 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04439 928 NtContinue (1244336, 0, ... 04440 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04441 928 NtContinue (1244336, 0, ... 04442 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04443 928 NtContinue (1244336, 0, ... 04444 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04445 928 NtContinue (1244336, 0, ... 04446 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04447 928 NtContinue (1244336, 0, ... 04448 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04449 928 NtContinue (1244336, 0, ... 04450 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04451 928 NtContinue (1244336, 0, ... 04452 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04453 928 NtContinue (1244336, 0, ... 04454 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04455 928 NtContinue (1244336, 0, ... 04456 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04457 928 NtContinue (1244336, 0, ... 04458 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04459 928 NtContinue (1244336, 0, ... 04460 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04461 928 NtContinue (1244336, 0, ... 04462 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04463 928 NtContinue (1244336, 0, ... 04464 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04465 928 NtContinue (1244336, 0, ... 04466 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04467 928 NtContinue (1244336, 0, ... 04468 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04469 928 NtContinue (1244336, 0, ... 04470 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04471 928 NtContinue (1244336, 0, ... 04472 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04473 928 NtContinue (1244336, 0, ... 04474 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04475 928 NtContinue (1244336, 0, ... 04476 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04477 928 NtContinue (1244336, 0, ... 04478 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04479 928 NtContinue (1244336, 0, ... 04480 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04481 928 NtContinue (1244336, 0, ... 04482 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04483 928 NtContinue (1244336, 0, ... 04484 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04485 928 NtContinue (1244336, 0, ... 04486 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04487 928 NtContinue (1244336, 0, ... 04488 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04489 928 NtContinue (1244336, 0, ... 04490 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04491 928 NtContinue (1244336, 0, ... 04492 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04493 928 NtContinue (1244336, 0, ... 04494 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04495 928 NtContinue (1244336, 0, ... 04496 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04497 928 NtContinue (1244336, 0, ... 04498 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04499 928 NtContinue (1244336, 0, ... 04500 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04501 928 NtContinue (1244336, 0, ... 04502 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04503 928 NtContinue (1244336, 0, ... 04504 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04505 928 NtContinue (1244336, 0, ... 04506 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04507 928 NtContinue (1244336, 0, ... 04508 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04509 928 NtContinue (1244336, 0, ... 04510 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04511 928 NtContinue (1244336, 0, ... 04512 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04513 928 NtContinue (1244336, 0, ... 04514 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04515 928 NtContinue (1244336, 0, ... 04516 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04517 928 NtContinue (1244336, 0, ... 04518 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04519 928 NtContinue (1244336, 0, ... 04520 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04521 928 NtContinue (1244336, 0, ... 04522 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04523 928 NtContinue (1244336, 0, ... 04524 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04525 928 NtContinue (1244336, 0, ... 04526 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04527 928 NtContinue (1244336, 0, ... 04528 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04529 928 NtContinue (1244336, 0, ... 04530 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04531 928 NtContinue (1244336, 0, ... 04532 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04533 928 NtContinue (1244336, 0, ... 04534 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04535 928 NtContinue (1244336, 0, ... 04536 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04537 928 NtContinue (1244336, 0, ... 04538 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04539 928 NtContinue (1244336, 0, ... 04540 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04541 928 NtContinue (1244336, 0, ... 04542 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04543 928 NtContinue (1244336, 0, ... 04544 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04545 928 NtContinue (1244336, 0, ... 04546 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04547 928 NtContinue (1244336, 0, ... 04548 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04549 928 NtContinue (1244336, 0, ... 04550 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04551 928 NtContinue (1244336, 0, ... 04552 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04553 928 NtContinue (1244336, 0, ... 04554 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04555 928 NtContinue (1244336, 0, ... 04556 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04557 928 NtContinue (1244336, 0, ... 04558 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04559 928 NtContinue (1244336, 0, ... 04560 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04561 928 NtContinue (1244336, 0, ... 04562 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04563 928 NtContinue (1244336, 0, ... 04564 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04565 928 NtContinue (1244336, 0, ... 04566 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04567 928 NtContinue (1244336, 0, ... 04568 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04569 928 NtContinue (1244336, 0, ... 04570 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04571 928 NtContinue (1244336, 0, ... 04572 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04573 928 NtContinue (1244336, 0, ... 04574 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04575 928 NtContinue (1244336, 0, ... 04576 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04577 928 NtContinue (1244336, 0, ... 04578 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04579 928 NtContinue (1244336, 0, ... 04580 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04581 928 NtContinue (1244336, 0, ... 04582 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04583 928 NtContinue (1244336, 0, ... 04584 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04585 928 NtContinue (1244336, 0, ... 04586 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04587 928 NtContinue (1244336, 0, ... 04588 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04589 928 NtContinue (1244336, 0, ... 04590 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04591 928 NtContinue (1244336, 0, ... 04592 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04593 928 NtContinue (1244336, 0, ... 04594 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04595 928 NtContinue (1244336, 0, ... 04596 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04597 928 NtContinue (1244336, 0, ... 04598 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04599 928 NtContinue (1244336, 0, ... 04600 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04601 928 NtContinue (1244336, 0, ... 04602 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04603 928 NtContinue (1244336, 0, ... 04604 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04605 928 NtContinue (1244336, 0, ... 04606 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04607 928 NtContinue (1244336, 0, ... 04608 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04609 928 NtContinue (1244336, 0, ... 04610 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04611 928 NtContinue (1244336, 0, ... 04612 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04613 928 NtContinue (1244336, 0, ... 04614 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04615 928 NtContinue (1244336, 0, ... 04616 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04617 928 NtContinue (1244336, 0, ... 04618 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04619 928 NtContinue (1244336, 0, ... 04620 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04621 928 NtContinue (1244336, 0, ... 04622 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04623 928 NtContinue (1244336, 0, ... 04624 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04625 928 NtContinue (1244336, 0, ... 04626 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04627 928 NtContinue (1244336, 0, ... 04628 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04629 928 NtContinue (1244336, 0, ... 04630 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04631 928 NtContinue (1244336, 0, ... 04632 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04633 928 NtContinue (1244336, 0, ... 04634 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04635 928 NtContinue (1244336, 0, ... 04636 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04637 928 NtContinue (1244336, 0, ... 04638 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04639 928 NtContinue (1244336, 0, ... 04640 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04641 928 NtContinue (1244336, 0, ... 04642 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04643 928 NtContinue (1244336, 0, ... 04644 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04645 928 NtContinue (1244336, 0, ... 04646 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04647 928 NtContinue (1244336, 0, ... 04648 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04649 928 NtContinue (1244336, 0, ... 04650 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04651 928 NtContinue (1244336, 0, ... 04652 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04653 928 NtContinue (1244336, 0, ... 04654 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04655 928 NtContinue (1244336, 0, ... 04656 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04657 928 NtContinue (1244336, 0, ... 04658 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04659 928 NtContinue (1244336, 0, ... 04660 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04661 928 NtContinue (1244336, 0, ... 04662 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04663 928 NtContinue (1244336, 0, ... 04664 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04665 928 NtContinue (1244336, 0, ... 04666 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04667 928 NtContinue (1244336, 0, ... 04668 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04669 928 NtContinue (1244336, 0, ... 04670 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04671 928 NtContinue (1244336, 0, ... 04672 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04673 928 NtContinue (1244336, 0, ... 04674 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04675 928 NtContinue (1244336, 0, ... 04676 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04677 928 NtContinue (1244336, 0, ... 04678 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04679 928 NtContinue (1244336, 0, ... 04680 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04681 928 NtContinue (1244336, 0, ... 04682 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04683 928 NtContinue (1244336, 0, ... 04684 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04685 928 NtContinue (1244336, 0, ... 04686 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04687 928 NtContinue (1244336, 0, ... 04688 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04689 928 NtContinue (1244336, 0, ... 04690 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04691 928 NtContinue (1244336, 0, ... 04692 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04693 928 NtContinue (1244336, 0, ... 04694 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04695 928 NtContinue (1244336, 0, ... 04696 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04697 928 NtContinue (1244336, 0, ... 04698 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04699 928 NtContinue (1244336, 0, ... 04700 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04701 928 NtContinue (1244336, 0, ... 04702 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04703 928 NtContinue (1244336, 0, ... 04704 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04705 928 NtContinue (1244336, 0, ... 04706 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04707 928 NtContinue (1244336, 0, ... 04708 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04709 928 NtContinue (1244336, 0, ... 04710 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04711 928 NtContinue (1244336, 0, ... 04712 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04713 928 NtContinue (1244336, 0, ... 04714 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04715 928 NtContinue (1244336, 0, ... 04716 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04717 928 NtContinue (1244336, 0, ... 04718 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04719 928 NtContinue (1244336, 0, ... 04720 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04721 928 NtContinue (1244336, 0, ... 04722 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04723 928 NtContinue (1244336, 0, ... 04724 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04725 928 NtContinue (1244336, 0, ... 04726 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04727 928 NtContinue (1244336, 0, ... 04728 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04729 928 NtContinue (1244336, 0, ... 04730 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04731 928 NtContinue (1244336, 0, ... 04732 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04733 928 NtContinue (1244336, 0, ... 04734 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04735 928 NtContinue (1244336, 0, ... 04736 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04737 928 NtContinue (1244336, 0, ... 04738 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04739 928 NtContinue (1244336, 0, ... 04740 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04741 928 NtContinue (1244336, 0, ... 04742 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04743 928 NtContinue (1244336, 0, ... 04744 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04745 928 NtContinue (1244336, 0, ... 04746 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04747 928 NtContinue (1244336, 0, ... 04748 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04749 928 NtContinue (1244336, 0, ... 04750 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04751 928 NtContinue (1244336, 0, ... 04752 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04753 928 NtContinue (1244336, 0, ... 04754 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04755 928 NtContinue (1244336, 0, ... 04756 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04757 928 NtContinue (1244336, 0, ... 04758 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04759 928 NtContinue (1244336, 0, ... 04760 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04761 928 NtContinue (1244336, 0, ... 04762 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04763 928 NtContinue (1244336, 0, ... 04764 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04765 928 NtContinue (1244336, 0, ... 04766 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04767 928 NtContinue (1244336, 0, ... 04768 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04769 928 NtContinue (1244336, 0, ... 04770 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04771 928 NtContinue (1244336, 0, ... 04772 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04773 928 NtContinue (1244336, 0, ... 04774 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04775 928 NtContinue (1244336, 0, ... 04776 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04777 928 NtContinue (1244336, 0, ... 04778 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04779 928 NtContinue (1244336, 0, ... 04780 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04781 928 NtContinue (1244336, 0, ... 04782 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04783 928 NtContinue (1244336, 0, ... 04784 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04785 928 NtContinue (1244336, 0, ... 04786 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04787 928 NtContinue (1244336, 0, ... 04788 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04789 928 NtContinue (1244336, 0, ... 04790 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04791 928 NtContinue (1244336, 0, ... 04792 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04793 928 NtContinue (1244336, 0, ... 04794 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04795 928 NtContinue (1244336, 0, ... 04796 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04797 928 NtContinue (1244336, 0, ... 04798 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04799 928 NtContinue (1244336, 0, ... 04800 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04801 928 NtContinue (1244336, 0, ... 04802 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04803 928 NtContinue (1244336, 0, ... 04804 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04805 928 NtContinue (1244336, 0, ... 04806 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04807 928 NtContinue (1244336, 0, ... 04808 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04809 928 NtContinue (1244336, 0, ... 04810 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04811 928 NtContinue (1244336, 0, ... 04812 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04813 928 NtContinue (1244336, 0, ... 04814 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04815 928 NtContinue (1244336, 0, ... 04816 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04817 928 NtContinue (1244336, 0, ... 04818 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04819 928 NtContinue (1244336, 0, ... 04820 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04821 928 NtContinue (1244336, 0, ... 04822 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04823 928 NtContinue (1244336, 0, ... 04824 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04825 928 NtContinue (1244336, 0, ... 04826 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04827 928 NtContinue (1244336, 0, ... 04828 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04829 928 NtContinue (1244336, 0, ... 04830 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04831 928 NtContinue (1244336, 0, ... 04832 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04833 928 NtContinue (1244336, 0, ... 04834 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04835 928 NtContinue (1244336, 0, ... 04836 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04837 928 NtContinue (1244336, 0, ... 04838 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04839 928 NtContinue (1244336, 0, ... 04840 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04841 928 NtContinue (1244336, 0, ... 04842 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04843 928 NtContinue (1244336, 0, ... 04844 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04845 928 NtContinue (1244336, 0, ... 04846 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04847 928 NtContinue (1244336, 0, ... 04848 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04849 928 NtContinue (1244336, 0, ... 04850 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04851 928 NtContinue (1244336, 0, ... 04852 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04853 928 NtContinue (1244336, 0, ... 04854 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04855 928 NtContinue (1244336, 0, ... 04856 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04857 928 NtContinue (1244336, 0, ... 04858 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04859 928 NtContinue (1244336, 0, ... 04860 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04861 928 NtContinue (1244336, 0, ... 04862 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04863 928 NtContinue (1244336, 0, ... 04864 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04865 928 NtContinue (1244336, 0, ... 04866 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04867 928 NtContinue (1244336, 0, ... 04868 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04869 928 NtContinue (1244336, 0, ... 04870 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04871 928 NtContinue (1244336, 0, ... 04872 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04873 928 NtContinue (1244336, 0, ... 04874 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04875 928 NtContinue (1244336, 0, ... 04876 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04877 928 NtContinue (1244336, 0, ... 04878 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04879 928 NtContinue (1244336, 0, ... 04880 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04881 928 NtContinue (1244336, 0, ... 04882 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04883 928 NtContinue (1244336, 0, ... 04884 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04885 928 NtContinue (1244336, 0, ... 04886 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04887 928 NtContinue (1244336, 0, ... 04888 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04889 928 NtContinue (1244336, 0, ... 04890 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04891 928 NtContinue (1244336, 0, ... 04892 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04893 928 NtContinue (1244336, 0, ... 04894 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04895 928 NtContinue (1244336, 0, ... 04896 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04897 928 NtContinue (1244336, 0, ... 04898 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04899 928 NtContinue (1244336, 0, ... 04900 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04901 928 NtContinue (1244336, 0, ... 04902 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04903 928 NtContinue (1244336, 0, ... 04904 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04905 928 NtContinue (1244336, 0, ... 04906 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04907 928 NtContinue (1244336, 0, ... 04908 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04909 928 NtContinue (1244336, 0, ... 04910 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04911 928 NtContinue (1244336, 0, ... 04912 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04913 928 NtContinue (1244336, 0, ... 04914 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04915 928 NtContinue (1244336, 0, ... 04916 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04917 928 NtContinue (1244336, 0, ... 04918 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04919 928 NtContinue (1244336, 0, ... 04920 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04921 928 NtContinue (1244336, 0, ... 04922 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04923 928 NtContinue (1244336, 0, ... 04924 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04925 928 NtContinue (1244336, 0, ... 04926 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04927 928 NtContinue (1244336, 0, ... 04928 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04929 928 NtContinue (1244336, 0, ... 04930 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04931 928 NtContinue (1244336, 0, ... 04932 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04933 928 NtContinue (1244336, 0, ... 04934 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04935 928 NtContinue (1244336, 0, ... 04936 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04937 928 NtContinue (1244336, 0, ... 04938 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04939 928 NtContinue (1244336, 0, ... 04940 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04941 928 NtContinue (1244336, 0, ... 04942 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04943 928 NtContinue (1244336, 0, ... 04944 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04945 928 NtContinue (1244336, 0, ... 04946 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04947 928 NtContinue (1244336, 0, ... 04948 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04949 928 NtContinue (1244336, 0, ... 04950 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04951 928 NtContinue (1244336, 0, ... 04952 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04953 928 NtContinue (1244336, 0, ... 04954 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04955 928 NtContinue (1244336, 0, ... 04956 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04957 928 NtContinue (1244336, 0, ... 04958 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04959 928 NtContinue (1244336, 0, ... 04960 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04961 928 NtContinue (1244336, 0, ... 04962 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04963 928 NtContinue (1244336, 0, ... 04964 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04965 928 NtContinue (1244336, 0, ... 04966 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04967 928 NtContinue (1244336, 0, ... 04968 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04969 928 NtContinue (1244336, 0, ... 04970 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04971 928 NtContinue (1244336, 0, ... 04972 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04973 928 NtContinue (1244336, 0, ... 04974 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04975 928 NtContinue (1244336, 0, ... 04976 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04977 928 NtContinue (1244336, 0, ... 04978 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04979 928 NtContinue (1244336, 0, ... 04980 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04981 928 NtContinue (1244336, 0, ... 04982 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04983 928 NtContinue (1244336, 0, ... 04984 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04985 928 NtContinue (1244336, 0, ... 04986 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04987 928 NtContinue (1244336, 0, ... 04988 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04989 928 NtContinue (1244336, 0, ... 04990 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04991 928 NtContinue (1244336, 0, ... 04992 928 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04993 928 NtContinue (1244336, 0, ...