Summary:

NtAddAtom(>) 1 NtQueryInstallUILanguage(>) 1 NtSetInformationObject(>) 2 NtQueryAttributesFile(>) 14
NtCallbackReturn(>) 1 NtQueryObject(>) 1 NtAccessCheck(>) 3 NtOpenFile(>) 20
NtCreateEvent(>) 1 NtQuerySymbolicLinkObject(>) 1 NtGdiCreateCompatibleDC(>) 3 NtOpenSection(>) 20
NtCreateFile(>) 1 NtQueryVolumeInformationFile(>) 1 NtUserRegisterWindowMessage(>) 3 NtQuerySystemInformation(>) 24
NtCreateKey(>) 1 NtRegisterThreadTerminatePort(>) 1 NtQueryDefaultLocale(>) 4 NtQueryValueKey(>) 26
NtCreateSemaphore(>) 1 NtSecureConnectPort(>) 1 NtGdiGetStockObject(>) 5 NtAllocateVirtualMemory(>) 28
NtDuplicateObject(>) 1 NtSetInformationProcess(>) 1 NtOpenProcessToken(>) 5 NtMapViewOfSection(>) 29
NtEnumerateValueKey(>) 1 NtSetInformationThread(>) 1 NtQueryInformationProcess(>) 5 NtUserFindExistingCursorIcon(>) 50
NtFsControlFile(>) 1 NtSetValueKey(>) 1 NtQuerySection(>) 5 NtOpenKey(>) 60
NtGdiCreateBitmap(>) 1 NtTestAlert(>) 1 NtRequestWaitReplyPort(>) 7 NtUserRegisterClassExWOW(>) 61
NtGdiInit(>) 1 NtUserCallNoParam(>) 1 NtOpenProcessTokenEx(>) 8 NtFlushInstructionCache(>) 65
NtGdiQueryFontAssocInfo(>) 1 NtUserCallOneParam(>) 1 NtOpenThreadTokenEx(>) 8 NtClose(>) 87
NtGdiSelectBitmap(>) 1 NtUserGetDC(>) 1 NtQueryDefaultUILanguage(>) 8 NtProtectVirtualMemory(>) 130
NtOpenEvent(>) 1 NtUserGetThreadDesktop(>) 1 NtUnmapViewOfSection(>) 8 NtContinue(>) 2112
NtOpenKeyedEvent(>) 1 NtDeviceIoControlFile(>) 2 NtQueryDebugFilterState(>) 9 NtQueryVirtualMemory(>) 2116
NtOpenProcess(>) 1 NtFreeVirtualMemory(>) 2 NtQueryInformationToken(>) 11
NtOpenSymbolicLinkObject(>) 1 NtGdiCreateSolidBrush(>) 2 NtUserSystemParametersInfo(>) 11
NtQueryInformationFile(>) 1

Trace:

00001 840 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 840 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 840 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 840 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 840 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 840 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 840 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 840 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 840 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 840 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 840 NtClose (12, ... ) == 0x0 00015 840 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 840 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 840 NtClose (16, ... ) == 0x0 00021 840 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 840 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 840 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 840 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 840 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 840 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 840 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 19136512}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 19136512}, {0, 0, 0}, 200, 44, ) == 0x0 00029 840 NtClose (16, ... ) == 0x0 00030 840 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 840 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 840 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 840 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 840 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6$\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ... {28, 56, reply, 0, 1736, 840, 75476, 0} "\330<\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ) ... {28, 56, reply, 0, 1736, 840, 75476, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6$\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ... {28, 56, reply, 0, 1736, 840, 75476, 0} "\330<\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ) ) == 0x0 00036 840 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 840 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 840 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 840 NtClose (16, ... ) == 0x0 00041 840 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 840 NtClose (16, ... ) == 0x0 00044 840 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 840 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 840 NtClose (16, ... ) == 0x0 00048 840 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 840 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 840 NtClose (16, ... ) == 0x0 00052 840 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 840 NtClose (16, ... ) == 0x0 00055 840 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 840 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 840 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 840 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 840 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6$\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ... {24, 52, reply, 0, 1736, 840, 75477, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ) ... {24, 52, reply, 0, 1736, 840, 75477, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6$\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ... {24, 52, reply, 0, 1736, 840, 75477, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ) ) == 0x0 00060 840 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6$\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ... {28, 56, reply, 0, 1736, 840, 75478, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ) ... {28, 56, reply, 0, 1736, 840, 75478, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6$\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ... {28, 56, reply, 0, 1736, 840, 75478, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ) ) == 0x0 00061 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 128, ) == 0x0 00062 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 128, ... (0x46d000), 77824, 4, ) == 0x0 00063 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00064 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00065 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00066 840 NtClose (16, ... ) == 0x0 00067 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00068 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00069 840 NtClose (16, ... ) == 0x0 00070 840 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00071 840 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00072 840 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00073 840 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00074 840 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00075 840 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00076 840 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00077 840 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00078 840 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00079 840 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00080 840 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00081 840 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00082 840 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00083 840 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00084 840 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00085 840 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00086 840 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00087 840 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00088 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00089 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00090 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00091 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "advapi32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00092 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00093 840 NtClose (16, ... ) == 0x0 00094 840 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00095 840 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00096 840 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00097 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 16, ) }, ... 16, ) == 0x0 00098 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00099 840 NtClose (16, ... ) == 0x0 00100 840 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00101 840 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00102 840 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00103 840 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00104 840 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00105 840 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00106 840 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00107 840 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00108 840 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00109 840 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00110 840 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00111 840 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00112 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00113 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00114 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00115 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00116 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00117 840 NtClose (16, ... ) == 0x0 00118 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00119 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00120 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00121 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00122 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00123 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00124 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00125 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00126 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00127 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 16, ) }, ... 16, ) == 0x0 00128 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00129 840 NtClose (16, ... ) == 0x0 00130 840 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00131 840 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00132 840 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00133 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00134 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00135 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00136 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00137 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00138 840 NtClose (16, ... ) == 0x0 00139 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00140 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00141 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00142 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00143 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00144 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00145 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00146 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00147 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00148 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00149 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00150 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00151 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00152 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00153 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00154 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00155 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00156 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00157 840 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00158 840 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00159 840 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00160 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00161 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00162 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00163 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00164 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00165 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00166 840 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00167 840 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00168 840 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00169 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00170 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00171 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00172 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00173 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00174 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00175 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00176 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c9c0000), 0x0, 8482816, ) == 0x0 00177 840 NtClose (16, ... ) == 0x0 00178 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00179 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00180 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00181 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00182 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00183 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00184 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00185 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00186 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00187 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00188 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00189 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00190 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00191 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00192 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00193 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00194 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00195 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00196 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 16, ) }, ... 16, ) == 0x0 00197 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f60000), 0x0, 483328, ) == 0x0 00198 840 NtClose (16, ... ) == 0x0 00199 840 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00200 840 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00201 840 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00202 840 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00203 840 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00204 840 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00205 840 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00206 840 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00207 840 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00208 840 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00209 840 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00210 840 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00211 840 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00212 840 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00213 840 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00214 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00215 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00216 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00217 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00218 840 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00219 840 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00220 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00221 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00222 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00223 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00224 840 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00225 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00226 840 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00227 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == 0x0 00228 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00229 840 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00230 840 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00231 840 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00232 840 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00233 840 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00234 840 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00235 840 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00236 840 NtClose (36, ... ) == 0x0 00237 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00238 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00239 840 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00240 840 NtClose (36, ... ) == 0x0 00241 840 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00242 840 NtClose (32, ... ) == 0x0 00243 840 NtClose (16, ... ) == 0x0 00244 840 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 94208, ) == 0x0 00245 840 NtClose (28, ... ) == 0x0 00246 840 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00247 840 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00248 840 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00249 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00251 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == 0x0 00252 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00253 840 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00254 840 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00255 840 NtClose (28, ... ) == 0x0 00256 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00257 840 NtClose (16, ... ) == 0x0 00258 840 NtProtectVirtualMemory (-1, (0x71aa1000), 352, 4, ... (0x71aa1000), 4096, 32, ) == 0x0 00259 840 NtProtectVirtualMemory (-1, (0x71aa1000), 4096, 32, ... (0x71aa1000), 4096, 4, ) == 0x0 00260 840 NtFlushInstructionCache (-1, 1906970624, 352, ... ) == 0x0 00261 840 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00262 840 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00263 840 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00264 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00265 840 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00266 840 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00267 840 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00268 840 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00269 840 NtOpenProcessToken (-1, 0x8, ... 16, ) == 0x0 00270 840 NtQueryInformationToken (16, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00271 840 NtClose (16, ... ) == 0x0 00272 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00273 840 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00274 840 NtClose (16, ... ) == 0x0 00275 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00276 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00277 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00278 840 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6$\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ... {28, 56, reply, 0, 1736, 840, 75479, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ) ... {28, 56, reply, 0, 1736, 840, 75479, 0} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6$\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ... {28, 56, reply, 0, 1736, 840, 75479, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ) ) == 0x0 00279 840 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 16, ) }, ... 16, ) == 0x0 00280 840 NtQueryValueKey (16, (16, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00281 840 NtClose (16, ... ) == 0x0 00282 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00283 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00284 840 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00285 840 NtClose (16, ... ) == 0x0 00286 840 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00287 840 NtClose (28, ... ) == 0x0 00288 840 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00289 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00290 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00291 840 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00292 840 NtClose (28, ... ) == 0x0 00293 840 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00294 840 NtClose (16, ... ) == 0x0 00295 840 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00296 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00297 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00298 840 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00299 840 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00300 840 NtClose (16, ... ) == 0x0 00301 840 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00302 840 NtClose (28, ... ) == 0x0 00303 840 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00304 840 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00305 840 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00306 840 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00307 840 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00308 840 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00309 840 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00310 840 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00311 840 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00312 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00313 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00314 840 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00315 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00316 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00317 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00318 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00319 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00320 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00322 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00323 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00325 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00326 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00327 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00328 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 28, ) }, ... 28, ) == 0x0 00330 840 NtQueryValueKey (28, (28, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00331 840 NtClose (28, ... ) == 0x0 00332 840 NtMapViewOfSection (-2147482576, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x480000), 0x0, 1060864, ) == 0x0 00333 840 NtClose (-2147482576, ... ) == 0x0 00334 840 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 28, ) == 0x0 00335 840 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00336 840 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147482576, ) == 0x0 00337 840 NtQueryInformationToken (-2147482576, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00338 840 NtQueryInformationToken (-2147482576, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00339 840 NtClose (-2147482576, ... ) == 0x0 00340 840 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00341 840 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00342 840 NtDuplicateObject (-1, 16, -1, 0x0, 0, 2, ... 36, ) == 0x0 00343 840 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482576, ) }, ... -2147482576, ) == 0x0 00344 840 NtQueryValueKey (-2147482576, (-2147482576, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00345 840 NtClose (-2147482576, ... ) == 0x0 00346 840 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482576, ) }, ... -2147482576, ) == 0x0 00347 840 NtQueryValueKey (-2147482576, (-2147482576, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00348 840 NtClose (-2147482576, ... ) == 0x0 00349 840 NtQueryDefaultLocale (0, -134731444, ... ) == 0x0 00350 840 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00351 840 NtUserCallNoParam (24, ... ) == 0x0 00352 840 NtGdiCreateCompatibleDC (0, ... 00353 840 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00352 840 NtGdiCreateCompatibleDC ... ) == 0xf2010663 00354 840 NtGdiGetStockObject (0, ... ) == 0x1900010 00355 840 NtGdiGetStockObject (4, ... ) == 0x1900011 00356 840 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0xfd0505f7 00357 840 NtGdiCreateSolidBrush (0, 0, ... 00358 840 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8978432, 4096, ) == 0x0 00357 840 NtGdiCreateSolidBrush ... ) == 0x4210057d 00359 840 NtGdiGetStockObject (13, ... ) == 0x18a0021 00360 840 NtGdiCreateCompatibleDC (0, ... ) == 0x69010363 00361 840 NtGdiSelectBitmap (1761674083, -50002441, ... ) == 0x185000f 00362 840 NtUserGetThreadDesktop (840, 0, ... ) == 0x20 00363 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00364 840 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00365 840 NtClose (40, ... ) == 0x0 00366 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00367 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x8174c017 00368 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00369 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x8174c01c 00370 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00371 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x8174c01e 00372 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00373 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x81748002 00374 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00375 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x8174c018 00376 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00377 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x8174c01a 00378 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00379 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x8174c01d 00380 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00381 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x8174c026 00382 840 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00383 840 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x8174c019 00384 840 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8174c020 00385 840 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8174c022 00386 840 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8174c023 00387 840 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8174c024 00388 840 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8174c025 00389 840 NtCallbackReturn (0, 0, 0, ... 00390 840 NtGdiInit (... ) == 0x1 00391 840 NtGdiGetStockObject (18, ... ) == 0x290001c 00392 840 NtGdiGetStockObject (19, ... ) == 0x1b00019 00393 840 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00394 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00395 840 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00396 840 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00397 840 NtClose (40, ... ) == 0x0 00398 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00399 840 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00400 840 NtClose (40, ... ) == 0x0 00401 840 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00402 840 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00403 840 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00404 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00405 840 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9043968, 65536, ) == 0x0 00406 840 NtAllocateVirtualMemory (-1, 9043968, 0, 4096, 4096, 4, ... 9043968, 4096, ) == 0x0 00407 840 NtAllocateVirtualMemory (-1, 9048064, 0, 8192, 4096, 4, ... 9048064, 8192, ) == 0x0 00408 840 NtAllocateVirtualMemory (-1, 9056256, 0, 4096, 4096, 4, ... 9056256, 4096, ) == 0x0 00409 840 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00410 840 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8b0000), 0x0, 12288, ) == 0x0 00411 840 NtClose (44, ... ) == 0x0 00412 840 NtAllocateVirtualMemory (-1, 9060352, 0, 4096, 4096, 4, ... 9060352, 4096, ) == 0x0 00413 840 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00414 840 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00415 840 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00416 840 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00417 840 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00418 840 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00419 840 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, ":\256\210\3444\337\263\337\311\375&\241Z\240s\302\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00420 840 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00421 840 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00422 840 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00423 840 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00424 840 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00425 840 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00426 840 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00427 840 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482576, 2, ) }, 0, 0x0, 0, ... -2147482576, 2, ) == 0x0 00428 840 NtSetValueKey (-2147482576, (-2147482576, "Seed", 0, 3, "\360\230\10\200\300\201>\12\317s\346\352\200\302k\1\217b\252[i\20y\275z\36\314y\313\375\210\36\351\376=\17\345\330\37o\324\2\375Y9\12'\214\355", 80, ... ) , 0, 3, (-2147482576, "Seed", 0, 3, "\360\230\10\200\300\201>\12\317s\346\352\200\302k\1\217b\252[i\20y\275z\36\314y\313\375\210\36\351\376=\17\345\330\37o\324\2\375Y9\12'\214\355", 80, ... ) , 80, ... ) == 0x0 00429 840 NtClose (-2147482576, ... ) == 0x0 00419 840 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, ">\232\220\261\331\202\333\21\224\272B.\3550\226\233\31\365\221\361\202\12\214\237\347O\221>d\235F\227\373%L\0n\5P\367\335\0\240yl\311sK\10i\317\323\30\216q\327\11\327J\234\376h\3218\3125\225\224Q\256\0^P\317(\30\341)\265;\263!5%\313\251\16\26\35\1\214O;\214\177\129\323\324\315\4\4\326\366=Eo\266\207(T\326\231m+\304\302>#\223\233ipd\201\217\316J\371\231N\277\335\27\224\367s\246 \251\16A!\220\22\213\232\2\234\224\27t\260\\357\352$\275\242\231c\307`\330\232\36F+\370n#G\356\264%X\344\30EQ-\346*z\347\261N\36\332S\32r\215kun\34\2650\277\314a\216m\363iE\236\364AM\366\312l\313v5\371\224\323\306e\274\270\16\231G\224vC\261d\216\334\321\15\202~\330y\215\327\154\275\353^M\215\2046\264\365>\14\0", ) , ) == 0x0 00430 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00431 840 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00432 840 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00433 840 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00434 840 NtClose (48, ... ) == 0x0 00435 840 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00436 840 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00437 840 NtClose (48, ... ) == 0x0 00438 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00439 840 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00440 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00441 840 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00442 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00443 840 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00444 840 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00445 840 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00446 840 NtClose (48, ... ) == 0x0 00447 840 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00448 840 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00449 840 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00450 840 NtClose (48, ... ) == 0x0 00451 840 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00452 840 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00453 840 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00454 840 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00455 840 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00456 840 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00457 840 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00458 840 NtCreateSemaphore (0x1f0003, {24, 48, 0x80, 1333696, 0, (0x1f0003, {24, 48, 0x80, 1333696, 0, "shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}"}, 0, 2147483647, ... 52, ) }, 0, 2147483647, ... 52, ) == STATUS_OBJECT_NAME_EXISTS 00459 840 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0 00460 840 NtQueryValueKey (56, (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00461 840 NtClose (56, ... ) == 0x0 00462 840 NtQueryDefaultUILanguage (1241692, ... 00463 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00464 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482576, ) == 0x0 00465 840 NtQueryInformationToken (-2147482576, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00466 840 NtClose (-2147482576, ... ) == 0x0 00467 840 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482576, ) }, ... -2147482576, ) == 0x0 00468 840 NtOpenKey (0x80000000, {24, -2147482576, 0x240, 0, 0, (0x80000000, {24, -2147482576, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00469 840 NtOpenKey (0x80000000, {24, -2147482576, 0x640, 0, 0, (0x80000000, {24, -2147482576, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481400, ) }, ... -2147481400, ) == 0x0 00470 840 NtQueryValueKey (-2147481400, (-2147481400, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00471 840 NtClose (-2147481400, ... ) == 0x0 00472 840 NtClose (-2147482576, ... ) == 0x0 00462 840 NtQueryDefaultUILanguage ... ) == 0x0 00473 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00474 840 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0 00475 840 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 8462336, ) == 0x0 00476 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00477 840 NtQueryDefaultUILanguage (2090319928, ... 00478 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00479 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482576, ) == 0x0 00480 840 NtQueryInformationToken (-2147482576, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00481 840 NtClose (-2147482576, ... ) == 0x0 00482 840 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482576, ) }, ... -2147482576, ) == 0x0 00483 840 NtOpenKey (0x80000000, {24, -2147482576, 0x240, 0, 0, (0x80000000, {24, -2147482576, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00484 840 NtOpenKey (0x80000000, {24, -2147482576, 0x640, 0, 0, (0x80000000, {24, -2147482576, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481400, ) }, ... -2147481400, ) == 0x0 00485 840 NtQueryValueKey (-2147481400, (-2147481400, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00486 840 NtClose (-2147481400, ... ) == 0x0 00487 840 NtClose (-2147482576, ... ) == 0x0 00477 840 NtQueryDefaultUILanguage ... ) == 0x0 00488 840 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00489 840 NtQueryDefaultLocale (1, 1239788, ... ) == 0x0 00490 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00491 840 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 840, 75480, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1736, 840, 75480, 0} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 840, 75480, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ) == 0x0 00492 840 NtClose (56, ... ) == 0x0 00493 840 NtClose (60, ... ) == 0x0 00494 840 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00495 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00496 840 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00497 840 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00498 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00499 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00500 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238980, ... ) }, 1238980, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00501 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00502 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00503 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00504 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 1239044, ... ) }, 1239044, ... ) == 0x0 00505 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0 00506 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00507 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00508 840 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00509 840 NtClose (56, ... ) == 0x0 00510 840 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 1056768, ) == 0x0 00511 840 NtClose (64, ... ) == 0x0 00512 840 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00513 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00514 840 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0 00515 840 NtQuerySection (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00516 840 NtClose (64, ... ) == 0x0 00517 840 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 1060864, ) == 0x0 00518 840 NtClose (56, ... ) == 0x0 00519 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00520 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00521 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00522 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00523 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00524 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00525 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00526 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00527 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00528 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00529 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00530 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00531 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00532 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00533 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00534 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00535 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00536 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00537 840 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00538 840 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00539 840 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00540 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00541 840 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240524, ... ) , 42, 1240524, ... ) == 0x0 00542 840 NtQueryDefaultUILanguage (1239208, ... 00543 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00544 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482576, ) == 0x0 00545 840 NtQueryInformationToken (-2147482576, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00546 840 NtClose (-2147482576, ... ) == 0x0 00547 840 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482576, ) }, ... -2147482576, ) == 0x0 00548 840 NtOpenKey (0x80000000, {24, -2147482576, 0x240, 0, 0, (0x80000000, {24, -2147482576, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00549 840 NtOpenKey (0x80000000, {24, -2147482576, 0x640, 0, 0, (0x80000000, {24, -2147482576, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481400, ) }, ... -2147481400, ) == 0x0 00550 840 NtQueryValueKey (-2147481400, (-2147481400, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00551 840 NtClose (-2147481400, ... ) == 0x0 00552 840 NtClose (-2147482576, ... ) == 0x0 00542 840 NtQueryDefaultUILanguage ... ) == 0x0 00553 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238048, ... ) }, 1238048, ... ) == 0x0 00554 840 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00555 840 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00556 840 NtClose (56, ... ) == 0x0 00557 840 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 4096, ) == 0x0 00558 840 NtClose (64, ... ) == 0x0 00559 840 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00560 840 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237644, ... ) }, 1237644, ... ) == 0x0 00561 840 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1238388, (0x80100080, {24, 0, 0x40, 0, 1238388, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0 00562 840 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00563 840 NtClose (64, ... ) == 0x0 00564 840 NtMapViewOfSection (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8c0000), {0, 0}, 4096, ) == 0x0 00565 840 NtClose (56, ... ) == 0x0 00566 840 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00567 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00568 840 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0 00569 840 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 4096, ) == 0x0 00570 840 NtQueryInformationFile (56, 1238040, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00571 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00572 840 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 840, 75489, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1736, 840, 75489, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 840, 75489, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ) == 0x0 00573 840 NtClose (56, ... ) == 0x0 00574 840 NtClose (64, ... ) == 0x0 00575 840 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00576 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00577 840 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00578 840 NtUserSystemParametersInfo (104, 0, 2001084812, 0, ... ) == 0x1 00579 840 NtUserGetDC (0, ... ) == 0x1010054 00580 840 NtUserCallOneParam (16842836, 57, ... ) == 0x1 00581 840 NtUserSystemParametersInfo (38, 4, 2001086940, 0, ... ) == 0x1 00582 840 NtUserSystemParametersInfo (66, 12, 1240040, 0, ... ) == 0x1 00583 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00584 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 64, ) == 0x0 00585 840 NtQueryInformationToken (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00586 840 NtClose (64, ... ) == 0x0 00587 840 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 64, ) }, ... 64, ) == 0x0 00588 840 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00589 840 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00590 840 NtClose (56, ... ) == 0x0 00591 840 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0 00592 840 NtQueryValueKey (56, (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00593 840 NtClose (56, ... ) == 0x0 00594 840 NtUserSystemParametersInfo (41, 500, 1240068, 0, ... ) == 0x1 00595 840 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00596 840 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00597 840 NtClose (56, ... ) == 0x0 00598 840 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0 00599 840 NtQueryValueKey (56, (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00600 840 NtClose (56, ... ) == 0x0 00601 840 NtUserSystemParametersInfo (27, 0, 2001085788, 0, ... ) == 0x1 00602 840 NtUserSystemParametersInfo (102, 0, 2001086828, 0, ... ) == 0x1 00603 840 NtClose (64, ... ) == 0x0 00604 840 NtUserSystemParametersInfo (4130, 0, 1240572, 0, ... ) == 0x1 00605 840 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 64, ) }, ... 64, ) == 0x0 00606 840 NtEnumerateValueKey (64, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00607 840 NtClose (64, ... ) == 0x0 00608 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00609 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c03b 00610 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c03d 00611 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00612 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c03f 00613 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00614 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c041 00615 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00616 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c043 00617 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c045 00618 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00619 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c047 00620 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00621 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c049 00622 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00623 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c04b 00624 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00625 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c04d 00626 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00627 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c04f 00628 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c051 00629 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00630 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c053 00631 840 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00632 840 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8174c055 00633 840 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00634 840 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8174c057 00635 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00636 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c059 00637 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00638 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c05b 00639 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00640 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c05d 00641 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00642 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c05f 00643 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00644 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c017 00645 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00646 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c019 00647 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00648 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c018 00649 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00650 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c01a 00651 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00652 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c01c 00653 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00654 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c01e 00655 840 NtUserFindExistingCursorIcon (1239812, 1239828, 1239876, ... ) == 0x10011 00656 840 NtUserRegisterClassExWOW (1239812, 1239880, 1239896, 1239912, 0, 384, 0, ... ) == 0x8174c01b 00657 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00658 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c068 00659 840 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00660 840 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8174c06a 00661 840 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 64, ) }, ... 64, ) == 0x0 00662 840 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5d090000), 0x0, 630784, ) == 0x0 00663 840 NtClose (64, ... ) == 0x0 00664 840 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00665 840 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00666 840 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00667 840 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00668 840 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00669 840 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00670 840 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00671 840 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00672 840 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00673 840 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00674 840 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00675 840 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00676 840 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00677 840 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00678 840 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00679 840 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00680 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00681 840 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0 00682 840 NtAllocateVirtualMemory (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0 00683 840 NtAllocateVirtualMemory (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0 00684 840 NtAllocateVirtualMemory (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0 00685 840 NtAllocateVirtualMemory (-1, 9191424, 0, 4096, 4096, 4, ... 9191424, 4096, ) == 0x0 00686 840 NtQueryDefaultUILanguage (1239820, ... 00687 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00688 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482576, ) == 0x0 00689 840 NtQueryInformationToken (-2147482576, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00690 840 NtClose (-2147482576, ... ) == 0x0 00691 840 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482576, ) }, ... -2147482576, ) == 0x0 00692 840 NtOpenKey (0x80000000, {24, -2147482576, 0x240, 0, 0, (0x80000000, {24, -2147482576, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00693 840 NtOpenKey (0x80000000, {24, -2147482576, 0x640, 0, 0, (0x80000000, {24, -2147482576, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481400, ) }, ... -2147481400, ) == 0x0 00694 840 NtQueryValueKey (-2147481400, (-2147481400, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00695 840 NtClose (-2147481400, ... ) == 0x0 00696 840 NtClose (-2147482576, ... ) == 0x0 00686 840 NtQueryDefaultUILanguage ... ) == 0x0 00697 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll"}, 1, 96, ... 64, {status=0x0, info=1}, ) }, 1, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00698 840 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00699 840 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 618496, ) == 0x0 00700 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00701 840 NtQueryDefaultLocale (1, 1237916, ... ) == 0x0 00702 840 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00703 840 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 840, 75492, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1736, 840, 75492, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 840, 75492, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ) == 0x0 00704 840 NtClose (64, ... ) == 0x0 00705 840 NtClose (56, ... ) == 0x0 00706 840 NtUnmapViewOfSection (-1, 0x8e0000, ... ) == 0x0 00707 840 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00708 840 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {1736, 0}, ... 56, ) == 0x0 00709 840 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00710 840 NtClose (56, ... ) == 0x0 00711 840 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00712 840 NtUserSystemParametersInfo (104, 0, 1561338260, 0, ... ) == 0x1 00713 840 NtUserSystemParametersInfo (38, 4, 1561337988, 0, ... ) == 0x1 00714 840 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00715 840 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00716 840 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00717 840 NtClose (56, ... ) == 0x0 00718 840 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 56, ) }, ... 56, ) == 0x0 00719 840 NtOpenProcessToken (-1, 0x8, ... 64, ) == 0x0 00720 840 NtAccessCheck (1332816, 64, 0x1, 1241012, 1241064, 56, 1241044, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00721 840 NtClose (64, ... ) == 0x0 00722 840 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00723 840 NtQueryValueKey (64, (64, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00724 840 NtClose (64, ... ) == 0x0 00725 840 NtUserSystemParametersInfo (41, 500, 1241192, 0, ... ) == 0x1 00726 840 NtUserSystemParametersInfo (102, 0, 1561338280, 0, ... ) == 0x1 00727 840 NtClose (56, ... ) == 0x0 00728 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00729 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c03b 00730 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c03d 00731 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00732 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c03f 00733 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00734 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c041 00735 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00736 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c043 00737 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c045 00738 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00739 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c047 00740 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00741 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c049 00742 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00743 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c04b 00744 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00745 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c04d 00746 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00747 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c04f 00748 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c051 00749 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00750 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c053 00751 840 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00752 840 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8174c055 00753 840 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00754 840 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8174c057 00755 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00756 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c059 00757 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10013 00758 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c05b 00759 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00760 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c05d 00761 840 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00762 840 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8174c05f 00763 840 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00764 840 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00765 840 NtTestAlert (... ) == 0x0 00766 840 NtContinue (1244464, 1, ... 00767 840 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x411709,}, 4, ... ) == 0x0 00768 840 NtQueryVirtualMemory (-1, 0x47d625, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00769 840 NtContinue (1244336, 0, ... 00770 840 NtAllocateVirtualMemory (-1, 0, 0, 122368, 4096, 4, ... 9306112, 122880, ) == 0x0 00771 840 NtQueryVirtualMemory (-1, 0x47d8a0, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00772 840 NtContinue (1244320, 0, ... 00773 840 NtAllocateVirtualMemory (-1, 0, 0, 147456, 4096, 4, ... 9437184, 147456, ) == 0x0 00774 840 NtQueryVirtualMemory (-1, 0x47d9ca, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00775 840 NtContinue (1244320, 0, ... 00776 840 NtQueryVirtualMemory (-1, 0x47dabd, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00777 840 NtContinue (1244328, 0, ... 00778 840 NtQueryVirtualMemory (-1, 0x47dba9, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00779 840 NtContinue (1244316, 0, ... 00780 840 NtQueryVirtualMemory (-1, 0x47dccd, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00781 840 NtContinue (1244328, 0, ... 00782 840 NtQueryVirtualMemory (-1, 0x47dde5, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00783 840 NtContinue (1244336, 0, ... 00784 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00785 840 NtContinue (1244328, 0, ... 00786 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00787 840 NtContinue (1244328, 0, ... 00788 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00789 840 NtContinue (1244328, 0, ... 00790 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00791 840 NtContinue (1244328, 0, ... 00792 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00793 840 NtContinue (1244328, 0, ... 00794 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00795 840 NtContinue (1244328, 0, ... 00796 840 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00797 840 NtContinue (1244328, 0, ... 00798 840 NtFreeVirtualMemory (-1, (0x8e0000), 122368, 16384, ... (0x8e0000), 122880, ) == 0x0 00799 840 NtQueryVirtualMemory (-1, 0x47e2b8, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00800 840 NtContinue (1244336, 0, ... 00801 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00802 840 NtContinue (1244336, 0, ... 00803 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00804 840 NtContinue (1244336, 0, ... 00805 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00806 840 NtContinue (1244336, 0, ... 00807 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00808 840 NtContinue (1244336, 0, ... 00809 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00810 840 NtContinue (1244336, 0, ... 00811 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00812 840 NtContinue (1244336, 0, ... 00813 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00814 840 NtContinue (1244336, 0, ... 00815 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00816 840 NtContinue (1244336, 0, ... 00817 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00818 840 NtContinue (1244336, 0, ... 00819 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00820 840 NtContinue (1244336, 0, ... 00821 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00822 840 NtContinue (1244336, 0, ... 00823 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00824 840 NtContinue (1244336, 0, ... 00825 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00826 840 NtContinue (1244336, 0, ... 00827 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00828 840 NtContinue (1244336, 0, ... 00829 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00830 840 NtContinue (1244336, 0, ... 00831 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00832 840 NtContinue (1244336, 0, ... 00833 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00834 840 NtContinue (1244336, 0, ... 00835 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00836 840 NtContinue (1244336, 0, ... 00837 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00838 840 NtContinue (1244336, 0, ... 00839 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00840 840 NtContinue (1244336, 0, ... 00841 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00842 840 NtContinue (1244336, 0, ... 00843 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00844 840 NtContinue (1244336, 0, ... 00845 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00846 840 NtContinue (1244336, 0, ... 00847 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00848 840 NtContinue (1244336, 0, ... 00849 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00850 840 NtContinue (1244336, 0, ... 00851 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00852 840 NtContinue (1244336, 0, ... 00853 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00854 840 NtContinue (1244336, 0, ... 00855 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00856 840 NtContinue (1244336, 0, ... 00857 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00858 840 NtContinue (1244336, 0, ... 00859 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00860 840 NtContinue (1244336, 0, ... 00861 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00862 840 NtContinue (1244336, 0, ... 00863 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00864 840 NtContinue (1244336, 0, ... 00865 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00866 840 NtContinue (1244336, 0, ... 00867 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00868 840 NtContinue (1244336, 0, ... 00869 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00870 840 NtContinue (1244336, 0, ... 00871 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00872 840 NtContinue (1244336, 0, ... 00873 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00874 840 NtContinue (1244336, 0, ... 00875 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00876 840 NtContinue (1244336, 0, ... 00877 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00878 840 NtContinue (1244336, 0, ... 00879 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00880 840 NtContinue (1244336, 0, ... 00881 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00882 840 NtContinue (1244336, 0, ... 00883 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00884 840 NtContinue (1244336, 0, ... 00885 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00886 840 NtContinue (1244336, 0, ... 00887 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00888 840 NtContinue (1244336, 0, ... 00889 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00890 840 NtContinue (1244336, 0, ... 00891 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00892 840 NtContinue (1244336, 0, ... 00893 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00894 840 NtContinue (1244336, 0, ... 00895 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00896 840 NtContinue (1244336, 0, ... 00897 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00898 840 NtContinue (1244336, 0, ... 00899 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00900 840 NtContinue (1244336, 0, ... 00901 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00902 840 NtContinue (1244336, 0, ... 00903 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00904 840 NtContinue (1244336, 0, ... 00905 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00906 840 NtContinue (1244336, 0, ... 00907 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00908 840 NtContinue (1244336, 0, ... 00909 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00910 840 NtContinue (1244336, 0, ... 00911 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00912 840 NtContinue (1244336, 0, ... 00913 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00914 840 NtContinue (1244336, 0, ... 00915 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00916 840 NtContinue (1244336, 0, ... 00917 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00918 840 NtContinue (1244336, 0, ... 00919 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00920 840 NtContinue (1244336, 0, ... 00921 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00922 840 NtContinue (1244336, 0, ... 00923 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00924 840 NtContinue (1244336, 0, ... 00925 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00926 840 NtContinue (1244336, 0, ... 00927 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00928 840 NtContinue (1244336, 0, ... 00929 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00930 840 NtContinue (1244336, 0, ... 00931 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00932 840 NtContinue (1244336, 0, ... 00933 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00934 840 NtContinue (1244336, 0, ... 00935 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00936 840 NtContinue (1244336, 0, ... 00937 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00938 840 NtContinue (1244336, 0, ... 00939 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00940 840 NtContinue (1244336, 0, ... 00941 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00942 840 NtContinue (1244336, 0, ... 00943 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00944 840 NtContinue (1244336, 0, ... 00945 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00946 840 NtContinue (1244336, 0, ... 00947 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00948 840 NtContinue (1244336, 0, ... 00949 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00950 840 NtContinue (1244336, 0, ... 00951 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00952 840 NtContinue (1244336, 0, ... 00953 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00954 840 NtContinue (1244336, 0, ... 00955 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00956 840 NtContinue (1244336, 0, ... 00957 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00958 840 NtContinue (1244336, 0, ... 00959 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00960 840 NtContinue (1244336, 0, ... 00961 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00962 840 NtContinue (1244336, 0, ... 00963 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00964 840 NtContinue (1244336, 0, ... 00965 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00966 840 NtContinue (1244336, 0, ... 00967 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00968 840 NtContinue (1244336, 0, ... 00969 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00970 840 NtContinue (1244336, 0, ... 00971 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00972 840 NtContinue (1244336, 0, ... 00973 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00974 840 NtContinue (1244336, 0, ... 00975 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00976 840 NtContinue (1244336, 0, ... 00977 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00978 840 NtContinue (1244336, 0, ... 00979 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00980 840 NtContinue (1244336, 0, ... 00981 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00982 840 NtContinue (1244336, 0, ... 00983 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00984 840 NtContinue (1244336, 0, ... 00985 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00986 840 NtContinue (1244336, 0, ... 00987 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00988 840 NtContinue (1244336, 0, ... 00989 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00990 840 NtContinue (1244336, 0, ... 00991 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00992 840 NtContinue (1244336, 0, ... 00993 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00994 840 NtContinue (1244336, 0, ... 00995 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00996 840 NtContinue (1244336, 0, ... 00997 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00998 840 NtContinue (1244336, 0, ... 00999 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01000 840 NtContinue (1244336, 0, ... 01001 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01002 840 NtContinue (1244336, 0, ... 01003 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01004 840 NtContinue (1244336, 0, ... 01005 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01006 840 NtContinue (1244336, 0, ... 01007 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01008 840 NtContinue (1244336, 0, ... 01009 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01010 840 NtContinue (1244336, 0, ... 01011 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01012 840 NtContinue (1244336, 0, ... 01013 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01014 840 NtContinue (1244336, 0, ... 01015 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01016 840 NtContinue (1244336, 0, ... 01017 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01018 840 NtContinue (1244336, 0, ... 01019 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01020 840 NtContinue (1244336, 0, ... 01021 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01022 840 NtContinue (1244336, 0, ... 01023 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01024 840 NtContinue (1244336, 0, ... 01025 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01026 840 NtContinue (1244336, 0, ... 01027 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01028 840 NtContinue (1244336, 0, ... 01029 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01030 840 NtContinue (1244336, 0, ... 01031 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01032 840 NtContinue (1244336, 0, ... 01033 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01034 840 NtContinue (1244336, 0, ... 01035 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01036 840 NtContinue (1244336, 0, ... 01037 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01038 840 NtContinue (1244336, 0, ... 01039 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01040 840 NtContinue (1244336, 0, ... 01041 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01042 840 NtContinue (1244336, 0, ... 01043 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01044 840 NtContinue (1244336, 0, ... 01045 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01046 840 NtContinue (1244336, 0, ... 01047 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01048 840 NtContinue (1244336, 0, ... 01049 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01050 840 NtContinue (1244336, 0, ... 01051 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01052 840 NtContinue (1244336, 0, ... 01053 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01054 840 NtContinue (1244336, 0, ... 01055 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01056 840 NtContinue (1244336, 0, ... 01057 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01058 840 NtContinue (1244336, 0, ... 01059 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01060 840 NtContinue (1244336, 0, ... 01061 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01062 840 NtContinue (1244336, 0, ... 01063 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01064 840 NtContinue (1244336, 0, ... 01065 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01066 840 NtContinue (1244336, 0, ... 01067 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01068 840 NtContinue (1244336, 0, ... 01069 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01070 840 NtContinue (1244336, 0, ... 01071 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01072 840 NtContinue (1244336, 0, ... 01073 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01074 840 NtContinue (1244336, 0, ... 01075 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01076 840 NtContinue (1244336, 0, ... 01077 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01078 840 NtContinue (1244336, 0, ... 01079 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01080 840 NtContinue (1244336, 0, ... 01081 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01082 840 NtContinue (1244336, 0, ... 01083 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01084 840 NtContinue (1244336, 0, ... 01085 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01086 840 NtContinue (1244336, 0, ... 01087 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01088 840 NtContinue (1244336, 0, ... 01089 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01090 840 NtContinue (1244336, 0, ... 01091 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01092 840 NtContinue (1244336, 0, ... 01093 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01094 840 NtContinue (1244336, 0, ... 01095 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01096 840 NtContinue (1244336, 0, ... 01097 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01098 840 NtContinue (1244336, 0, ... 01099 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01100 840 NtContinue (1244336, 0, ... 01101 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01102 840 NtContinue (1244336, 0, ... 01103 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01104 840 NtContinue (1244336, 0, ... 01105 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01106 840 NtContinue (1244336, 0, ... 01107 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01108 840 NtContinue (1244336, 0, ... 01109 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01110 840 NtContinue (1244336, 0, ... 01111 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01112 840 NtContinue (1244336, 0, ... 01113 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01114 840 NtContinue (1244336, 0, ... 01115 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01116 840 NtContinue (1244336, 0, ... 01117 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01118 840 NtContinue (1244336, 0, ... 01119 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01120 840 NtContinue (1244336, 0, ... 01121 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01122 840 NtContinue (1244336, 0, ... 01123 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01124 840 NtContinue (1244336, 0, ... 01125 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01126 840 NtContinue (1244336, 0, ... 01127 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01128 840 NtContinue (1244336, 0, ... 01129 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01130 840 NtContinue (1244336, 0, ... 01131 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01132 840 NtContinue (1244336, 0, ... 01133 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01134 840 NtContinue (1244336, 0, ... 01135 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01136 840 NtContinue (1244336, 0, ... 01137 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01138 840 NtContinue (1244336, 0, ... 01139 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01140 840 NtContinue (1244336, 0, ... 01141 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01142 840 NtContinue (1244336, 0, ... 01143 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01144 840 NtContinue (1244336, 0, ... 01145 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01146 840 NtContinue (1244336, 0, ... 01147 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01148 840 NtContinue (1244336, 0, ... 01149 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01150 840 NtContinue (1244336, 0, ... 01151 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01152 840 NtContinue (1244336, 0, ... 01153 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01154 840 NtContinue (1244336, 0, ... 01155 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01156 840 NtContinue (1244336, 0, ... 01157 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01158 840 NtContinue (1244336, 0, ... 01159 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01160 840 NtContinue (1244336, 0, ... 01161 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01162 840 NtContinue (1244336, 0, ... 01163 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01164 840 NtContinue (1244336, 0, ... 01165 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01166 840 NtContinue (1244336, 0, ... 01167 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01168 840 NtContinue (1244336, 0, ... 01169 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01170 840 NtContinue (1244336, 0, ... 01171 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01172 840 NtContinue (1244336, 0, ... 01173 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01174 840 NtContinue (1244336, 0, ... 01175 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01176 840 NtContinue (1244336, 0, ... 01177 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01178 840 NtContinue (1244336, 0, ... 01179 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01180 840 NtContinue (1244336, 0, ... 01181 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01182 840 NtContinue (1244336, 0, ... 01183 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01184 840 NtContinue (1244336, 0, ... 01185 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01186 840 NtContinue (1244336, 0, ... 01187 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01188 840 NtContinue (1244336, 0, ... 01189 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01190 840 NtContinue (1244336, 0, ... 01191 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01192 840 NtContinue (1244336, 0, ... 01193 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01194 840 NtContinue (1244336, 0, ... 01195 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01196 840 NtContinue (1244336, 0, ... 01197 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01198 840 NtContinue (1244336, 0, ... 01199 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01200 840 NtContinue (1244336, 0, ... 01201 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01202 840 NtContinue (1244336, 0, ... 01203 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01204 840 NtContinue (1244336, 0, ... 01205 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01206 840 NtContinue (1244336, 0, ... 01207 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01208 840 NtContinue (1244336, 0, ... 01209 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01210 840 NtContinue (1244336, 0, ... 01211 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01212 840 NtContinue (1244336, 0, ... 01213 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01214 840 NtContinue (1244336, 0, ... 01215 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01216 840 NtContinue (1244336, 0, ... 01217 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01218 840 NtContinue (1244336, 0, ... 01219 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01220 840 NtContinue (1244336, 0, ... 01221 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01222 840 NtContinue (1244336, 0, ... 01223 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01224 840 NtContinue (1244336, 0, ... 01225 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01226 840 NtContinue (1244336, 0, ... 01227 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01228 840 NtContinue (1244336, 0, ... 01229 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01230 840 NtContinue (1244336, 0, ... 01231 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01232 840 NtContinue (1244336, 0, ... 01233 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01234 840 NtContinue (1244336, 0, ... 01235 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01236 840 NtContinue (1244336, 0, ... 01237 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01238 840 NtContinue (1244336, 0, ... 01239 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01240 840 NtContinue (1244336, 0, ... 01241 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01242 840 NtContinue (1244336, 0, ... 01243 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01244 840 NtContinue (1244336, 0, ... 01245 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01246 840 NtContinue (1244336, 0, ... 01247 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01248 840 NtContinue (1244336, 0, ... 01249 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01250 840 NtContinue (1244336, 0, ... 01251 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01252 840 NtContinue (1244336, 0, ... 01253 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01254 840 NtContinue (1244336, 0, ... 01255 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01256 840 NtContinue (1244336, 0, ... 01257 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01258 840 NtContinue (1244336, 0, ... 01259 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01260 840 NtContinue (1244336, 0, ... 01261 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01262 840 NtContinue (1244336, 0, ... 01263 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01264 840 NtContinue (1244336, 0, ... 01265 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01266 840 NtContinue (1244336, 0, ... 01267 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01268 840 NtContinue (1244336, 0, ... 01269 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01270 840 NtContinue (1244336, 0, ... 01271 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01272 840 NtContinue (1244336, 0, ... 01273 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01274 840 NtContinue (1244336, 0, ... 01275 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01276 840 NtContinue (1244336, 0, ... 01277 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01278 840 NtContinue (1244336, 0, ... 01279 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01280 840 NtContinue (1244336, 0, ... 01281 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01282 840 NtContinue (1244336, 0, ... 01283 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01284 840 NtContinue (1244336, 0, ... 01285 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01286 840 NtContinue (1244336, 0, ... 01287 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01288 840 NtContinue (1244336, 0, ... 01289 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01290 840 NtContinue (1244336, 0, ... 01291 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01292 840 NtContinue (1244336, 0, ... 01293 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01294 840 NtContinue (1244336, 0, ... 01295 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01296 840 NtContinue (1244336, 0, ... 01297 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01298 840 NtContinue (1244336, 0, ... 01299 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01300 840 NtContinue (1244336, 0, ... 01301 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01302 840 NtContinue (1244336, 0, ... 01303 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01304 840 NtContinue (1244336, 0, ... 01305 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01306 840 NtContinue (1244336, 0, ... 01307 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01308 840 NtContinue (1244336, 0, ... 01309 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01310 840 NtContinue (1244336, 0, ... 01311 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01312 840 NtContinue (1244336, 0, ... 01313 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01314 840 NtContinue (1244336, 0, ... 01315 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01316 840 NtContinue (1244336, 0, ... 01317 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01318 840 NtContinue (1244336, 0, ... 01319 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01320 840 NtContinue (1244336, 0, ... 01321 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01322 840 NtContinue (1244336, 0, ... 01323 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01324 840 NtContinue (1244336, 0, ... 01325 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01326 840 NtContinue (1244336, 0, ... 01327 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01328 840 NtContinue (1244336, 0, ... 01329 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01330 840 NtContinue (1244336, 0, ... 01331 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01332 840 NtContinue (1244336, 0, ... 01333 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01334 840 NtContinue (1244336, 0, ... 01335 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01336 840 NtContinue (1244336, 0, ... 01337 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01338 840 NtContinue (1244336, 0, ... 01339 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01340 840 NtContinue (1244336, 0, ... 01341 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01342 840 NtContinue (1244336, 0, ... 01343 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01344 840 NtContinue (1244336, 0, ... 01345 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01346 840 NtContinue (1244336, 0, ... 01347 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01348 840 NtContinue (1244336, 0, ... 01349 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01350 840 NtContinue (1244336, 0, ... 01351 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01352 840 NtContinue (1244336, 0, ... 01353 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01354 840 NtContinue (1244336, 0, ... 01355 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01356 840 NtContinue (1244336, 0, ... 01357 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01358 840 NtContinue (1244336, 0, ... 01359 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01360 840 NtContinue (1244336, 0, ... 01361 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01362 840 NtContinue (1244336, 0, ... 01363 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01364 840 NtContinue (1244336, 0, ... 01365 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01366 840 NtContinue (1244336, 0, ... 01367 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01368 840 NtContinue (1244336, 0, ... 01369 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01370 840 NtContinue (1244336, 0, ... 01371 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01372 840 NtContinue (1244336, 0, ... 01373 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01374 840 NtContinue (1244336, 0, ... 01375 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01376 840 NtContinue (1244336, 0, ... 01377 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01378 840 NtContinue (1244336, 0, ... 01379 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01380 840 NtContinue (1244336, 0, ... 01381 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01382 840 NtContinue (1244336, 0, ... 01383 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01384 840 NtContinue (1244336, 0, ... 01385 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01386 840 NtContinue (1244336, 0, ... 01387 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01388 840 NtContinue (1244336, 0, ... 01389 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01390 840 NtContinue (1244336, 0, ... 01391 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01392 840 NtContinue (1244336, 0, ... 01393 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01394 840 NtContinue (1244336, 0, ... 01395 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01396 840 NtContinue (1244336, 0, ... 01397 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01398 840 NtContinue (1244336, 0, ... 01399 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01400 840 NtContinue (1244336, 0, ... 01401 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01402 840 NtContinue (1244336, 0, ... 01403 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01404 840 NtContinue (1244336, 0, ... 01405 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01406 840 NtContinue (1244336, 0, ... 01407 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01408 840 NtContinue (1244336, 0, ... 01409 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01410 840 NtContinue (1244336, 0, ... 01411 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01412 840 NtContinue (1244336, 0, ... 01413 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01414 840 NtContinue (1244336, 0, ... 01415 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01416 840 NtContinue (1244336, 0, ... 01417 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01418 840 NtContinue (1244336, 0, ... 01419 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01420 840 NtContinue (1244336, 0, ... 01421 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01422 840 NtContinue (1244336, 0, ... 01423 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01424 840 NtContinue (1244336, 0, ... 01425 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01426 840 NtContinue (1244336, 0, ... 01427 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01428 840 NtContinue (1244336, 0, ... 01429 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01430 840 NtContinue (1244336, 0, ... 01431 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01432 840 NtContinue (1244336, 0, ... 01433 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01434 840 NtContinue (1244336, 0, ... 01435 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01436 840 NtContinue (1244336, 0, ... 01437 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01438 840 NtContinue (1244336, 0, ... 01439 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01440 840 NtContinue (1244336, 0, ... 01441 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01442 840 NtContinue (1244336, 0, ... 01443 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01444 840 NtContinue (1244336, 0, ... 01445 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01446 840 NtContinue (1244336, 0, ... 01447 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01448 840 NtContinue (1244336, 0, ... 01449 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01450 840 NtContinue (1244336, 0, ... 01451 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01452 840 NtContinue (1244336, 0, ... 01453 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01454 840 NtContinue (1244336, 0, ... 01455 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01456 840 NtContinue (1244336, 0, ... 01457 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01458 840 NtContinue (1244336, 0, ... 01459 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01460 840 NtContinue (1244336, 0, ... 01461 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01462 840 NtContinue (1244336, 0, ... 01463 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01464 840 NtContinue (1244336, 0, ... 01465 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01466 840 NtContinue (1244336, 0, ... 01467 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01468 840 NtContinue (1244336, 0, ... 01469 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01470 840 NtContinue (1244336, 0, ... 01471 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01472 840 NtContinue (1244336, 0, ... 01473 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01474 840 NtContinue (1244336, 0, ... 01475 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01476 840 NtContinue (1244336, 0, ... 01477 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01478 840 NtContinue (1244336, 0, ... 01479 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01480 840 NtContinue (1244336, 0, ... 01481 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01482 840 NtContinue (1244336, 0, ... 01483 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01484 840 NtContinue (1244336, 0, ... 01485 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01486 840 NtContinue (1244336, 0, ... 01487 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01488 840 NtContinue (1244336, 0, ... 01489 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01490 840 NtContinue (1244336, 0, ... 01491 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01492 840 NtContinue (1244336, 0, ... 01493 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01494 840 NtContinue (1244336, 0, ... 01495 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01496 840 NtContinue (1244336, 0, ... 01497 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01498 840 NtContinue (1244336, 0, ... 01499 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01500 840 NtContinue (1244336, 0, ... 01501 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01502 840 NtContinue (1244336, 0, ... 01503 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01504 840 NtContinue (1244336, 0, ... 01505 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01506 840 NtContinue (1244336, 0, ... 01507 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01508 840 NtContinue (1244336, 0, ... 01509 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01510 840 NtContinue (1244336, 0, ... 01511 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01512 840 NtContinue (1244336, 0, ... 01513 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01514 840 NtContinue (1244336, 0, ... 01515 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01516 840 NtContinue (1244336, 0, ... 01517 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01518 840 NtContinue (1244336, 0, ... 01519 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01520 840 NtContinue (1244336, 0, ... 01521 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01522 840 NtContinue (1244336, 0, ... 01523 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01524 840 NtContinue (1244336, 0, ... 01525 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01526 840 NtContinue (1244336, 0, ... 01527 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01528 840 NtContinue (1244336, 0, ... 01529 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01530 840 NtContinue (1244336, 0, ... 01531 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01532 840 NtContinue (1244336, 0, ... 01533 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01534 840 NtContinue (1244336, 0, ... 01535 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01536 840 NtContinue (1244336, 0, ... 01537 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01538 840 NtContinue (1244336, 0, ... 01539 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01540 840 NtContinue (1244336, 0, ... 01541 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01542 840 NtContinue (1244336, 0, ... 01543 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01544 840 NtContinue (1244336, 0, ... 01545 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01546 840 NtContinue (1244336, 0, ... 01547 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01548 840 NtContinue (1244336, 0, ... 01549 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01550 840 NtContinue (1244336, 0, ... 01551 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01552 840 NtContinue (1244336, 0, ... 01553 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01554 840 NtContinue (1244336, 0, ... 01555 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01556 840 NtContinue (1244336, 0, ... 01557 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01558 840 NtContinue (1244336, 0, ... 01559 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01560 840 NtContinue (1244336, 0, ... 01561 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01562 840 NtContinue (1244336, 0, ... 01563 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01564 840 NtContinue (1244336, 0, ... 01565 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01566 840 NtContinue (1244336, 0, ... 01567 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01568 840 NtContinue (1244336, 0, ... 01569 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01570 840 NtContinue (1244336, 0, ... 01571 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01572 840 NtContinue (1244336, 0, ... 01573 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01574 840 NtContinue (1244336, 0, ... 01575 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01576 840 NtContinue (1244336, 0, ... 01577 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01578 840 NtContinue (1244336, 0, ... 01579 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01580 840 NtContinue (1244336, 0, ... 01581 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01582 840 NtContinue (1244336, 0, ... 01583 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01584 840 NtContinue (1244336, 0, ... 01585 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01586 840 NtContinue (1244336, 0, ... 01587 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01588 840 NtContinue (1244336, 0, ... 01589 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01590 840 NtContinue (1244336, 0, ... 01591 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01592 840 NtContinue (1244336, 0, ... 01593 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01594 840 NtContinue (1244336, 0, ... 01595 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01596 840 NtContinue (1244336, 0, ... 01597 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01598 840 NtContinue (1244336, 0, ... 01599 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01600 840 NtContinue (1244336, 0, ... 01601 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01602 840 NtContinue (1244336, 0, ... 01603 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01604 840 NtContinue (1244336, 0, ... 01605 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01606 840 NtContinue (1244336, 0, ... 01607 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01608 840 NtContinue (1244336, 0, ... 01609 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01610 840 NtContinue (1244336, 0, ... 01611 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01612 840 NtContinue (1244336, 0, ... 01613 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01614 840 NtContinue (1244336, 0, ... 01615 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01616 840 NtContinue (1244336, 0, ... 01617 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01618 840 NtContinue (1244336, 0, ... 01619 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01620 840 NtContinue (1244336, 0, ... 01621 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01622 840 NtContinue (1244336, 0, ... 01623 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01624 840 NtContinue (1244336, 0, ... 01625 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01626 840 NtContinue (1244336, 0, ... 01627 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01628 840 NtContinue (1244336, 0, ... 01629 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01630 840 NtContinue (1244336, 0, ... 01631 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01632 840 NtContinue (1244336, 0, ... 01633 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01634 840 NtContinue (1244336, 0, ... 01635 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01636 840 NtContinue (1244336, 0, ... 01637 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01638 840 NtContinue (1244336, 0, ... 01639 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01640 840 NtContinue (1244336, 0, ... 01641 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01642 840 NtContinue (1244336, 0, ... 01643 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01644 840 NtContinue (1244336, 0, ... 01645 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01646 840 NtContinue (1244336, 0, ... 01647 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01648 840 NtContinue (1244336, 0, ... 01649 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01650 840 NtContinue (1244336, 0, ... 01651 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01652 840 NtContinue (1244336, 0, ... 01653 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01654 840 NtContinue (1244336, 0, ... 01655 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01656 840 NtContinue (1244336, 0, ... 01657 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01658 840 NtContinue (1244336, 0, ... 01659 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01660 840 NtContinue (1244336, 0, ... 01661 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01662 840 NtContinue (1244336, 0, ... 01663 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01664 840 NtContinue (1244336, 0, ... 01665 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01666 840 NtContinue (1244336, 0, ... 01667 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01668 840 NtContinue (1244336, 0, ... 01669 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01670 840 NtContinue (1244336, 0, ... 01671 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01672 840 NtContinue (1244336, 0, ... 01673 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01674 840 NtContinue (1244336, 0, ... 01675 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01676 840 NtContinue (1244336, 0, ... 01677 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01678 840 NtContinue (1244336, 0, ... 01679 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01680 840 NtContinue (1244336, 0, ... 01681 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01682 840 NtContinue (1244336, 0, ... 01683 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01684 840 NtContinue (1244336, 0, ... 01685 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01686 840 NtContinue (1244336, 0, ... 01687 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01688 840 NtContinue (1244336, 0, ... 01689 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01690 840 NtContinue (1244336, 0, ... 01691 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01692 840 NtContinue (1244336, 0, ... 01693 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01694 840 NtContinue (1244336, 0, ... 01695 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01696 840 NtContinue (1244336, 0, ... 01697 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01698 840 NtContinue (1244336, 0, ... 01699 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01700 840 NtContinue (1244336, 0, ... 01701 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01702 840 NtContinue (1244336, 0, ... 01703 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01704 840 NtContinue (1244336, 0, ... 01705 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01706 840 NtContinue (1244336, 0, ... 01707 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01708 840 NtContinue (1244336, 0, ... 01709 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01710 840 NtContinue (1244336, 0, ... 01711 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01712 840 NtContinue (1244336, 0, ... 01713 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01714 840 NtContinue (1244336, 0, ... 01715 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01716 840 NtContinue (1244336, 0, ... 01717 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01718 840 NtContinue (1244336, 0, ... 01719 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01720 840 NtContinue (1244336, 0, ... 01721 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01722 840 NtContinue (1244336, 0, ... 01723 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01724 840 NtContinue (1244336, 0, ... 01725 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01726 840 NtContinue (1244336, 0, ... 01727 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01728 840 NtContinue (1244336, 0, ... 01729 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01730 840 NtContinue (1244336, 0, ... 01731 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01732 840 NtContinue (1244336, 0, ... 01733 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01734 840 NtContinue (1244336, 0, ... 01735 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01736 840 NtContinue (1244336, 0, ... 01737 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01738 840 NtContinue (1244336, 0, ... 01739 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01740 840 NtContinue (1244336, 0, ... 01741 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01742 840 NtContinue (1244336, 0, ... 01743 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01744 840 NtContinue (1244336, 0, ... 01745 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01746 840 NtContinue (1244336, 0, ... 01747 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01748 840 NtContinue (1244336, 0, ... 01749 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01750 840 NtContinue (1244336, 0, ... 01751 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01752 840 NtContinue (1244336, 0, ... 01753 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01754 840 NtContinue (1244336, 0, ... 01755 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01756 840 NtContinue (1244336, 0, ... 01757 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01758 840 NtContinue (1244336, 0, ... 01759 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01760 840 NtContinue (1244336, 0, ... 01761 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01762 840 NtContinue (1244336, 0, ... 01763 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01764 840 NtContinue (1244336, 0, ... 01765 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01766 840 NtContinue (1244336, 0, ... 01767 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01768 840 NtContinue (1244336, 0, ... 01769 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01770 840 NtContinue (1244336, 0, ... 01771 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01772 840 NtContinue (1244336, 0, ... 01773 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01774 840 NtContinue (1244336, 0, ... 01775 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01776 840 NtContinue (1244336, 0, ... 01777 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01778 840 NtContinue (1244336, 0, ... 01779 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01780 840 NtContinue (1244336, 0, ... 01781 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01782 840 NtContinue (1244336, 0, ... 01783 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01784 840 NtContinue (1244336, 0, ... 01785 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01786 840 NtContinue (1244336, 0, ... 01787 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01788 840 NtContinue (1244336, 0, ... 01789 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01790 840 NtContinue (1244336, 0, ... 01791 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01792 840 NtContinue (1244336, 0, ... 01793 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01794 840 NtContinue (1244336, 0, ... 01795 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01796 840 NtContinue (1244336, 0, ... 01797 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01798 840 NtContinue (1244336, 0, ... 01799 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01800 840 NtContinue (1244336, 0, ... 01801 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01802 840 NtContinue (1244336, 0, ... 01803 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01804 840 NtContinue (1244336, 0, ... 01805 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01806 840 NtContinue (1244336, 0, ... 01807 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01808 840 NtContinue (1244336, 0, ... 01809 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01810 840 NtContinue (1244336, 0, ... 01811 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01812 840 NtContinue (1244336, 0, ... 01813 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01814 840 NtContinue (1244336, 0, ... 01815 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01816 840 NtContinue (1244336, 0, ... 01817 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01818 840 NtContinue (1244336, 0, ... 01819 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01820 840 NtContinue (1244336, 0, ... 01821 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01822 840 NtContinue (1244336, 0, ... 01823 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01824 840 NtContinue (1244336, 0, ... 01825 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01826 840 NtContinue (1244336, 0, ... 01827 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01828 840 NtContinue (1244336, 0, ... 01829 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01830 840 NtContinue (1244336, 0, ... 01831 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01832 840 NtContinue (1244336, 0, ... 01833 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01834 840 NtContinue (1244336, 0, ... 01835 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01836 840 NtContinue (1244336, 0, ... 01837 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01838 840 NtContinue (1244336, 0, ... 01839 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01840 840 NtContinue (1244336, 0, ... 01841 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01842 840 NtContinue (1244336, 0, ... 01843 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01844 840 NtContinue (1244336, 0, ... 01845 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01846 840 NtContinue (1244336, 0, ... 01847 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01848 840 NtContinue (1244336, 0, ... 01849 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01850 840 NtContinue (1244336, 0, ... 01851 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01852 840 NtContinue (1244336, 0, ... 01853 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01854 840 NtContinue (1244336, 0, ... 01855 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01856 840 NtContinue (1244336, 0, ... 01857 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01858 840 NtContinue (1244336, 0, ... 01859 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01860 840 NtContinue (1244336, 0, ... 01861 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01862 840 NtContinue (1244336, 0, ... 01863 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01864 840 NtContinue (1244336, 0, ... 01865 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01866 840 NtContinue (1244336, 0, ... 01867 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01868 840 NtContinue (1244336, 0, ... 01869 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01870 840 NtContinue (1244336, 0, ... 01871 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01872 840 NtContinue (1244336, 0, ... 01873 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01874 840 NtContinue (1244336, 0, ... 01875 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01876 840 NtContinue (1244336, 0, ... 01877 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01878 840 NtContinue (1244336, 0, ... 01879 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01880 840 NtContinue (1244336, 0, ... 01881 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01882 840 NtContinue (1244336, 0, ... 01883 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01884 840 NtContinue (1244336, 0, ... 01885 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01886 840 NtContinue (1244336, 0, ... 01887 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01888 840 NtContinue (1244336, 0, ... 01889 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01890 840 NtContinue (1244336, 0, ... 01891 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01892 840 NtContinue (1244336, 0, ... 01893 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01894 840 NtContinue (1244336, 0, ... 01895 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01896 840 NtContinue (1244336, 0, ... 01897 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01898 840 NtContinue (1244336, 0, ... 01899 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01900 840 NtContinue (1244336, 0, ... 01901 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01902 840 NtContinue (1244336, 0, ... 01903 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01904 840 NtContinue (1244336, 0, ... 01905 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01906 840 NtContinue (1244336, 0, ... 01907 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01908 840 NtContinue (1244336, 0, ... 01909 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01910 840 NtContinue (1244336, 0, ... 01911 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01912 840 NtContinue (1244336, 0, ... 01913 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01914 840 NtContinue (1244336, 0, ... 01915 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01916 840 NtContinue (1244336, 0, ... 01917 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01918 840 NtContinue (1244336, 0, ... 01919 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01920 840 NtContinue (1244336, 0, ... 01921 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01922 840 NtContinue (1244336, 0, ... 01923 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01924 840 NtContinue (1244336, 0, ... 01925 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01926 840 NtContinue (1244336, 0, ... 01927 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01928 840 NtContinue (1244336, 0, ... 01929 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01930 840 NtContinue (1244336, 0, ... 01931 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01932 840 NtContinue (1244336, 0, ... 01933 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01934 840 NtContinue (1244336, 0, ... 01935 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01936 840 NtContinue (1244336, 0, ... 01937 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01938 840 NtContinue (1244336, 0, ... 01939 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01940 840 NtContinue (1244336, 0, ... 01941 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01942 840 NtContinue (1244336, 0, ... 01943 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01944 840 NtContinue (1244336, 0, ... 01945 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01946 840 NtContinue (1244336, 0, ... 01947 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01948 840 NtContinue (1244336, 0, ... 01949 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01950 840 NtContinue (1244336, 0, ... 01951 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01952 840 NtContinue (1244336, 0, ... 01953 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01954 840 NtContinue (1244336, 0, ... 01955 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01956 840 NtContinue (1244336, 0, ... 01957 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01958 840 NtContinue (1244336, 0, ... 01959 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01960 840 NtContinue (1244336, 0, ... 01961 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01962 840 NtContinue (1244336, 0, ... 01963 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01964 840 NtContinue (1244336, 0, ... 01965 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01966 840 NtContinue (1244336, 0, ... 01967 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01968 840 NtContinue (1244336, 0, ... 01969 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01970 840 NtContinue (1244336, 0, ... 01971 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01972 840 NtContinue (1244336, 0, ... 01973 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01974 840 NtContinue (1244336, 0, ... 01975 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01976 840 NtContinue (1244336, 0, ... 01977 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01978 840 NtContinue (1244336, 0, ... 01979 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01980 840 NtContinue (1244336, 0, ... 01981 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01982 840 NtContinue (1244336, 0, ... 01983 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01984 840 NtContinue (1244336, 0, ... 01985 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01986 840 NtContinue (1244336, 0, ... 01987 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01988 840 NtContinue (1244336, 0, ... 01989 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01990 840 NtContinue (1244336, 0, ... 01991 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01992 840 NtContinue (1244336, 0, ... 01993 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01994 840 NtContinue (1244336, 0, ... 01995 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01996 840 NtContinue (1244336, 0, ... 01997 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01998 840 NtContinue (1244336, 0, ... 01999 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02000 840 NtContinue (1244336, 0, ... 02001 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02002 840 NtContinue (1244336, 0, ... 02003 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02004 840 NtContinue (1244336, 0, ... 02005 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02006 840 NtContinue (1244336, 0, ... 02007 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02008 840 NtContinue (1244336, 0, ... 02009 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02010 840 NtContinue (1244336, 0, ... 02011 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02012 840 NtContinue (1244336, 0, ... 02013 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02014 840 NtContinue (1244336, 0, ... 02015 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02016 840 NtContinue (1244336, 0, ... 02017 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02018 840 NtContinue (1244336, 0, ... 02019 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02020 840 NtContinue (1244336, 0, ... 02021 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02022 840 NtContinue (1244336, 0, ... 02023 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02024 840 NtContinue (1244336, 0, ... 02025 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02026 840 NtContinue (1244336, 0, ... 02027 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02028 840 NtContinue (1244336, 0, ... 02029 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02030 840 NtContinue (1244336, 0, ... 02031 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02032 840 NtContinue (1244336, 0, ... 02033 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02034 840 NtContinue (1244336, 0, ... 02035 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02036 840 NtContinue (1244336, 0, ... 02037 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02038 840 NtContinue (1244336, 0, ... 02039 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02040 840 NtContinue (1244336, 0, ... 02041 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02042 840 NtContinue (1244336, 0, ... 02043 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02044 840 NtContinue (1244336, 0, ... 02045 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02046 840 NtContinue (1244336, 0, ... 02047 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02048 840 NtContinue (1244336, 0, ... 02049 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02050 840 NtContinue (1244336, 0, ... 02051 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02052 840 NtContinue (1244336, 0, ... 02053 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02054 840 NtContinue (1244336, 0, ... 02055 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02056 840 NtContinue (1244336, 0, ... 02057 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02058 840 NtContinue (1244336, 0, ... 02059 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02060 840 NtContinue (1244336, 0, ... 02061 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02062 840 NtContinue (1244336, 0, ... 02063 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02064 840 NtContinue (1244336, 0, ... 02065 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02066 840 NtContinue (1244336, 0, ... 02067 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02068 840 NtContinue (1244336, 0, ... 02069 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02070 840 NtContinue (1244336, 0, ... 02071 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02072 840 NtContinue (1244336, 0, ... 02073 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02074 840 NtContinue (1244336, 0, ... 02075 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02076 840 NtContinue (1244336, 0, ... 02077 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02078 840 NtContinue (1244336, 0, ... 02079 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02080 840 NtContinue (1244336, 0, ... 02081 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02082 840 NtContinue (1244336, 0, ... 02083 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02084 840 NtContinue (1244336, 0, ... 02085 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02086 840 NtContinue (1244336, 0, ... 02087 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02088 840 NtContinue (1244336, 0, ... 02089 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02090 840 NtContinue (1244336, 0, ... 02091 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02092 840 NtContinue (1244336, 0, ... 02093 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02094 840 NtContinue (1244336, 0, ... 02095 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02096 840 NtContinue (1244336, 0, ... 02097 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02098 840 NtContinue (1244336, 0, ... 02099 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02100 840 NtContinue (1244336, 0, ... 02101 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02102 840 NtContinue (1244336, 0, ... 02103 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02104 840 NtContinue (1244336, 0, ... 02105 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02106 840 NtContinue (1244336, 0, ... 02107 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02108 840 NtContinue (1244336, 0, ... 02109 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02110 840 NtContinue (1244336, 0, ... 02111 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02112 840 NtContinue (1244336, 0, ... 02113 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02114 840 NtContinue (1244336, 0, ... 02115 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02116 840 NtContinue (1244336, 0, ... 02117 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02118 840 NtContinue (1244336, 0, ... 02119 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02120 840 NtContinue (1244336, 0, ... 02121 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02122 840 NtContinue (1244336, 0, ... 02123 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02124 840 NtContinue (1244336, 0, ... 02125 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02126 840 NtContinue (1244336, 0, ... 02127 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02128 840 NtContinue (1244336, 0, ... 02129 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02130 840 NtContinue (1244336, 0, ... 02131 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02132 840 NtContinue (1244336, 0, ... 02133 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02134 840 NtContinue (1244336, 0, ... 02135 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02136 840 NtContinue (1244336, 0, ... 02137 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02138 840 NtContinue (1244336, 0, ... 02139 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02140 840 NtContinue (1244336, 0, ... 02141 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02142 840 NtContinue (1244336, 0, ... 02143 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02144 840 NtContinue (1244336, 0, ... 02145 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02146 840 NtContinue (1244336, 0, ... 02147 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02148 840 NtContinue (1244336, 0, ... 02149 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02150 840 NtContinue (1244336, 0, ... 02151 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02152 840 NtContinue (1244336, 0, ... 02153 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02154 840 NtContinue (1244336, 0, ... 02155 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02156 840 NtContinue (1244336, 0, ... 02157 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02158 840 NtContinue (1244336, 0, ... 02159 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02160 840 NtContinue (1244336, 0, ... 02161 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02162 840 NtContinue (1244336, 0, ... 02163 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02164 840 NtContinue (1244336, 0, ... 02165 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02166 840 NtContinue (1244336, 0, ... 02167 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02168 840 NtContinue (1244336, 0, ... 02169 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02170 840 NtContinue (1244336, 0, ... 02171 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02172 840 NtContinue (1244336, 0, ... 02173 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02174 840 NtContinue (1244336, 0, ... 02175 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02176 840 NtContinue (1244336, 0, ... 02177 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02178 840 NtContinue (1244336, 0, ... 02179 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02180 840 NtContinue (1244336, 0, ... 02181 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02182 840 NtContinue (1244336, 0, ... 02183 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02184 840 NtContinue (1244336, 0, ... 02185 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02186 840 NtContinue (1244336, 0, ... 02187 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02188 840 NtContinue (1244336, 0, ... 02189 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02190 840 NtContinue (1244336, 0, ... 02191 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02192 840 NtContinue (1244336, 0, ... 02193 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02194 840 NtContinue (1244336, 0, ... 02195 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02196 840 NtContinue (1244336, 0, ... 02197 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02198 840 NtContinue (1244336, 0, ... 02199 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02200 840 NtContinue (1244336, 0, ... 02201 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02202 840 NtContinue (1244336, 0, ... 02203 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02204 840 NtContinue (1244336, 0, ... 02205 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02206 840 NtContinue (1244336, 0, ... 02207 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02208 840 NtContinue (1244336, 0, ... 02209 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02210 840 NtContinue (1244336, 0, ... 02211 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02212 840 NtContinue (1244336, 0, ... 02213 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02214 840 NtContinue (1244336, 0, ... 02215 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02216 840 NtContinue (1244336, 0, ... 02217 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02218 840 NtContinue (1244336, 0, ... 02219 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02220 840 NtContinue (1244336, 0, ... 02221 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02222 840 NtContinue (1244336, 0, ... 02223 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02224 840 NtContinue (1244336, 0, ... 02225 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02226 840 NtContinue (1244336, 0, ... 02227 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02228 840 NtContinue (1244336, 0, ... 02229 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02230 840 NtContinue (1244336, 0, ... 02231 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02232 840 NtContinue (1244336, 0, ... 02233 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02234 840 NtContinue (1244336, 0, ... 02235 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02236 840 NtContinue (1244336, 0, ... 02237 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02238 840 NtContinue (1244336, 0, ... 02239 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02240 840 NtContinue (1244336, 0, ... 02241 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02242 840 NtContinue (1244336, 0, ... 02243 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02244 840 NtContinue (1244336, 0, ... 02245 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02246 840 NtContinue (1244336, 0, ... 02247 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02248 840 NtContinue (1244336, 0, ... 02249 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02250 840 NtContinue (1244336, 0, ... 02251 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02252 840 NtContinue (1244336, 0, ... 02253 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02254 840 NtContinue (1244336, 0, ... 02255 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02256 840 NtContinue (1244336, 0, ... 02257 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02258 840 NtContinue (1244336, 0, ... 02259 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02260 840 NtContinue (1244336, 0, ... 02261 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02262 840 NtContinue (1244336, 0, ... 02263 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02264 840 NtContinue (1244336, 0, ... 02265 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02266 840 NtContinue (1244336, 0, ... 02267 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02268 840 NtContinue (1244336, 0, ... 02269 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02270 840 NtContinue (1244336, 0, ... 02271 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02272 840 NtContinue (1244336, 0, ... 02273 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02274 840 NtContinue (1244336, 0, ... 02275 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02276 840 NtContinue (1244336, 0, ... 02277 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02278 840 NtContinue (1244336, 0, ... 02279 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02280 840 NtContinue (1244336, 0, ... 02281 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02282 840 NtContinue (1244336, 0, ... 02283 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02284 840 NtContinue (1244336, 0, ... 02285 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02286 840 NtContinue (1244336, 0, ... 02287 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02288 840 NtContinue (1244336, 0, ... 02289 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02290 840 NtContinue (1244336, 0, ... 02291 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02292 840 NtContinue (1244336, 0, ... 02293 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02294 840 NtContinue (1244336, 0, ... 02295 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02296 840 NtContinue (1244336, 0, ... 02297 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02298 840 NtContinue (1244336, 0, ... 02299 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02300 840 NtContinue (1244336, 0, ... 02301 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02302 840 NtContinue (1244336, 0, ... 02303 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02304 840 NtContinue (1244336, 0, ... 02305 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02306 840 NtContinue (1244336, 0, ... 02307 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02308 840 NtContinue (1244336, 0, ... 02309 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02310 840 NtContinue (1244336, 0, ... 02311 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02312 840 NtContinue (1244336, 0, ... 02313 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02314 840 NtContinue (1244336, 0, ... 02315 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02316 840 NtContinue (1244336, 0, ... 02317 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02318 840 NtContinue (1244336, 0, ... 02319 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02320 840 NtContinue (1244336, 0, ... 02321 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02322 840 NtContinue (1244336, 0, ... 02323 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02324 840 NtContinue (1244336, 0, ... 02325 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02326 840 NtContinue (1244336, 0, ... 02327 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02328 840 NtContinue (1244336, 0, ... 02329 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02330 840 NtContinue (1244336, 0, ... 02331 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02332 840 NtContinue (1244336, 0, ... 02333 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02334 840 NtContinue (1244336, 0, ... 02335 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02336 840 NtContinue (1244336, 0, ... 02337 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02338 840 NtContinue (1244336, 0, ... 02339 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02340 840 NtContinue (1244336, 0, ... 02341 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02342 840 NtContinue (1244336, 0, ... 02343 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02344 840 NtContinue (1244336, 0, ... 02345 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02346 840 NtContinue (1244336, 0, ... 02347 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02348 840 NtContinue (1244336, 0, ... 02349 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02350 840 NtContinue (1244336, 0, ... 02351 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02352 840 NtContinue (1244336, 0, ... 02353 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02354 840 NtContinue (1244336, 0, ... 02355 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02356 840 NtContinue (1244336, 0, ... 02357 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02358 840 NtContinue (1244336, 0, ... 02359 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02360 840 NtContinue (1244336, 0, ... 02361 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02362 840 NtContinue (1244336, 0, ... 02363 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02364 840 NtContinue (1244336, 0, ... 02365 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02366 840 NtContinue (1244336, 0, ... 02367 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02368 840 NtContinue (1244336, 0, ... 02369 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02370 840 NtContinue (1244336, 0, ... 02371 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02372 840 NtContinue (1244336, 0, ... 02373 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02374 840 NtContinue (1244336, 0, ... 02375 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02376 840 NtContinue (1244336, 0, ... 02377 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02378 840 NtContinue (1244336, 0, ... 02379 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02380 840 NtContinue (1244336, 0, ... 02381 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02382 840 NtContinue (1244336, 0, ... 02383 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02384 840 NtContinue (1244336, 0, ... 02385 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02386 840 NtContinue (1244336, 0, ... 02387 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02388 840 NtContinue (1244336, 0, ... 02389 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02390 840 NtContinue (1244336, 0, ... 02391 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02392 840 NtContinue (1244336, 0, ... 02393 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02394 840 NtContinue (1244336, 0, ... 02395 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02396 840 NtContinue (1244336, 0, ... 02397 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02398 840 NtContinue (1244336, 0, ... 02399 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02400 840 NtContinue (1244336, 0, ... 02401 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02402 840 NtContinue (1244336, 0, ... 02403 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02404 840 NtContinue (1244336, 0, ... 02405 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02406 840 NtContinue (1244336, 0, ... 02407 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02408 840 NtContinue (1244336, 0, ... 02409 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02410 840 NtContinue (1244336, 0, ... 02411 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02412 840 NtContinue (1244336, 0, ... 02413 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02414 840 NtContinue (1244336, 0, ... 02415 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02416 840 NtContinue (1244336, 0, ... 02417 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02418 840 NtContinue (1244336, 0, ... 02419 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02420 840 NtContinue (1244336, 0, ... 02421 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02422 840 NtContinue (1244336, 0, ... 02423 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02424 840 NtContinue (1244336, 0, ... 02425 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02426 840 NtContinue (1244336, 0, ... 02427 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02428 840 NtContinue (1244336, 0, ... 02429 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02430 840 NtContinue (1244336, 0, ... 02431 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02432 840 NtContinue (1244336, 0, ... 02433 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02434 840 NtContinue (1244336, 0, ... 02435 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02436 840 NtContinue (1244336, 0, ... 02437 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02438 840 NtContinue (1244336, 0, ... 02439 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02440 840 NtContinue (1244336, 0, ... 02441 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02442 840 NtContinue (1244336, 0, ... 02443 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02444 840 NtContinue (1244336, 0, ... 02445 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02446 840 NtContinue (1244336, 0, ... 02447 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02448 840 NtContinue (1244336, 0, ... 02449 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02450 840 NtContinue (1244336, 0, ... 02451 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02452 840 NtContinue (1244336, 0, ... 02453 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02454 840 NtContinue (1244336, 0, ... 02455 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02456 840 NtContinue (1244336, 0, ... 02457 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02458 840 NtContinue (1244336, 0, ... 02459 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02460 840 NtContinue (1244336, 0, ... 02461 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02462 840 NtContinue (1244336, 0, ... 02463 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02464 840 NtContinue (1244336, 0, ... 02465 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02466 840 NtContinue (1244336, 0, ... 02467 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02468 840 NtContinue (1244336, 0, ... 02469 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02470 840 NtContinue (1244336, 0, ... 02471 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02472 840 NtContinue (1244336, 0, ... 02473 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02474 840 NtContinue (1244336, 0, ... 02475 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02476 840 NtContinue (1244336, 0, ... 02477 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02478 840 NtContinue (1244336, 0, ... 02479 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02480 840 NtContinue (1244336, 0, ... 02481 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02482 840 NtContinue (1244336, 0, ... 02483 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02484 840 NtContinue (1244336, 0, ... 02485 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02486 840 NtContinue (1244336, 0, ... 02487 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02488 840 NtContinue (1244336, 0, ... 02489 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02490 840 NtContinue (1244336, 0, ... 02491 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02492 840 NtContinue (1244336, 0, ... 02493 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02494 840 NtContinue (1244336, 0, ... 02495 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02496 840 NtContinue (1244336, 0, ... 02497 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02498 840 NtContinue (1244336, 0, ... 02499 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02500 840 NtContinue (1244336, 0, ... 02501 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02502 840 NtContinue (1244336, 0, ... 02503 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02504 840 NtContinue (1244336, 0, ... 02505 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02506 840 NtContinue (1244336, 0, ... 02507 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02508 840 NtContinue (1244336, 0, ... 02509 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02510 840 NtContinue (1244336, 0, ... 02511 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02512 840 NtContinue (1244336, 0, ... 02513 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02514 840 NtContinue (1244336, 0, ... 02515 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02516 840 NtContinue (1244336, 0, ... 02517 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02518 840 NtContinue (1244336, 0, ... 02519 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02520 840 NtContinue (1244336, 0, ... 02521 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02522 840 NtContinue (1244336, 0, ... 02523 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02524 840 NtContinue (1244336, 0, ... 02525 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02526 840 NtContinue (1244336, 0, ... 02527 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02528 840 NtContinue (1244336, 0, ... 02529 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02530 840 NtContinue (1244336, 0, ... 02531 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02532 840 NtContinue (1244336, 0, ... 02533 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02534 840 NtContinue (1244336, 0, ... 02535 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02536 840 NtContinue (1244336, 0, ... 02537 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02538 840 NtContinue (1244336, 0, ... 02539 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02540 840 NtContinue (1244336, 0, ... 02541 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02542 840 NtContinue (1244336, 0, ... 02543 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02544 840 NtContinue (1244336, 0, ... 02545 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02546 840 NtContinue (1244336, 0, ... 02547 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02548 840 NtContinue (1244336, 0, ... 02549 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02550 840 NtContinue (1244336, 0, ... 02551 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02552 840 NtContinue (1244336, 0, ... 02553 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02554 840 NtContinue (1244336, 0, ... 02555 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02556 840 NtContinue (1244336, 0, ... 02557 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02558 840 NtContinue (1244336, 0, ... 02559 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02560 840 NtContinue (1244336, 0, ... 02561 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02562 840 NtContinue (1244336, 0, ... 02563 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02564 840 NtContinue (1244336, 0, ... 02565 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02566 840 NtContinue (1244336, 0, ... 02567 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02568 840 NtContinue (1244336, 0, ... 02569 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02570 840 NtContinue (1244336, 0, ... 02571 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02572 840 NtContinue (1244336, 0, ... 02573 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02574 840 NtContinue (1244336, 0, ... 02575 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02576 840 NtContinue (1244336, 0, ... 02577 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02578 840 NtContinue (1244336, 0, ... 02579 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02580 840 NtContinue (1244336, 0, ... 02581 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02582 840 NtContinue (1244336, 0, ... 02583 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02584 840 NtContinue (1244336, 0, ... 02585 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02586 840 NtContinue (1244336, 0, ... 02587 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02588 840 NtContinue (1244336, 0, ... 02589 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02590 840 NtContinue (1244336, 0, ... 02591 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02592 840 NtContinue (1244336, 0, ... 02593 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02594 840 NtContinue (1244336, 0, ... 02595 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02596 840 NtContinue (1244336, 0, ... 02597 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02598 840 NtContinue (1244336, 0, ... 02599 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02600 840 NtContinue (1244336, 0, ... 02601 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02602 840 NtContinue (1244336, 0, ... 02603 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02604 840 NtContinue (1244336, 0, ... 02605 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02606 840 NtContinue (1244336, 0, ... 02607 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02608 840 NtContinue (1244336, 0, ... 02609 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02610 840 NtContinue (1244336, 0, ... 02611 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02612 840 NtContinue (1244336, 0, ... 02613 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02614 840 NtContinue (1244336, 0, ... 02615 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02616 840 NtContinue (1244336, 0, ... 02617 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02618 840 NtContinue (1244336, 0, ... 02619 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02620 840 NtContinue (1244336, 0, ... 02621 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02622 840 NtContinue (1244336, 0, ... 02623 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02624 840 NtContinue (1244336, 0, ... 02625 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02626 840 NtContinue (1244336, 0, ... 02627 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02628 840 NtContinue (1244336, 0, ... 02629 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02630 840 NtContinue (1244336, 0, ... 02631 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02632 840 NtContinue (1244336, 0, ... 02633 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02634 840 NtContinue (1244336, 0, ... 02635 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02636 840 NtContinue (1244336, 0, ... 02637 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02638 840 NtContinue (1244336, 0, ... 02639 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02640 840 NtContinue (1244336, 0, ... 02641 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02642 840 NtContinue (1244336, 0, ... 02643 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02644 840 NtContinue (1244336, 0, ... 02645 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02646 840 NtContinue (1244336, 0, ... 02647 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02648 840 NtContinue (1244336, 0, ... 02649 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02650 840 NtContinue (1244336, 0, ... 02651 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02652 840 NtContinue (1244336, 0, ... 02653 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02654 840 NtContinue (1244336, 0, ... 02655 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02656 840 NtContinue (1244336, 0, ... 02657 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02658 840 NtContinue (1244336, 0, ... 02659 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02660 840 NtContinue (1244336, 0, ... 02661 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02662 840 NtContinue (1244336, 0, ... 02663 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02664 840 NtContinue (1244336, 0, ... 02665 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02666 840 NtContinue (1244336, 0, ... 02667 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02668 840 NtContinue (1244336, 0, ... 02669 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02670 840 NtContinue (1244336, 0, ... 02671 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02672 840 NtContinue (1244336, 0, ... 02673 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02674 840 NtContinue (1244336, 0, ... 02675 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02676 840 NtContinue (1244336, 0, ... 02677 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02678 840 NtContinue (1244336, 0, ... 02679 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02680 840 NtContinue (1244336, 0, ... 02681 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02682 840 NtContinue (1244336, 0, ... 02683 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02684 840 NtContinue (1244336, 0, ... 02685 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02686 840 NtContinue (1244336, 0, ... 02687 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02688 840 NtContinue (1244336, 0, ... 02689 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02690 840 NtContinue (1244336, 0, ... 02691 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02692 840 NtContinue (1244336, 0, ... 02693 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02694 840 NtContinue (1244336, 0, ... 02695 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02696 840 NtContinue (1244336, 0, ... 02697 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02698 840 NtContinue (1244336, 0, ... 02699 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02700 840 NtContinue (1244336, 0, ... 02701 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02702 840 NtContinue (1244336, 0, ... 02703 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02704 840 NtContinue (1244336, 0, ... 02705 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02706 840 NtContinue (1244336, 0, ... 02707 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02708 840 NtContinue (1244336, 0, ... 02709 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02710 840 NtContinue (1244336, 0, ... 02711 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02712 840 NtContinue (1244336, 0, ... 02713 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02714 840 NtContinue (1244336, 0, ... 02715 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02716 840 NtContinue (1244336, 0, ... 02717 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02718 840 NtContinue (1244336, 0, ... 02719 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02720 840 NtContinue (1244336, 0, ... 02721 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02722 840 NtContinue (1244336, 0, ... 02723 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02724 840 NtContinue (1244336, 0, ... 02725 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02726 840 NtContinue (1244336, 0, ... 02727 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02728 840 NtContinue (1244336, 0, ... 02729 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02730 840 NtContinue (1244336, 0, ... 02731 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02732 840 NtContinue (1244336, 0, ... 02733 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02734 840 NtContinue (1244336, 0, ... 02735 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02736 840 NtContinue (1244336, 0, ... 02737 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02738 840 NtContinue (1244336, 0, ... 02739 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02740 840 NtContinue (1244336, 0, ... 02741 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02742 840 NtContinue (1244336, 0, ... 02743 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02744 840 NtContinue (1244336, 0, ... 02745 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02746 840 NtContinue (1244336, 0, ... 02747 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02748 840 NtContinue (1244336, 0, ... 02749 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02750 840 NtContinue (1244336, 0, ... 02751 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02752 840 NtContinue (1244336, 0, ... 02753 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02754 840 NtContinue (1244336, 0, ... 02755 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02756 840 NtContinue (1244336, 0, ... 02757 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02758 840 NtContinue (1244336, 0, ... 02759 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02760 840 NtContinue (1244336, 0, ... 02761 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02762 840 NtContinue (1244336, 0, ... 02763 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02764 840 NtContinue (1244336, 0, ... 02765 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02766 840 NtContinue (1244336, 0, ... 02767 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02768 840 NtContinue (1244336, 0, ... 02769 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02770 840 NtContinue (1244336, 0, ... 02771 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02772 840 NtContinue (1244336, 0, ... 02773 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02774 840 NtContinue (1244336, 0, ... 02775 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02776 840 NtContinue (1244336, 0, ... 02777 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02778 840 NtContinue (1244336, 0, ... 02779 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02780 840 NtContinue (1244336, 0, ... 02781 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02782 840 NtContinue (1244336, 0, ... 02783 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02784 840 NtContinue (1244336, 0, ... 02785 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02786 840 NtContinue (1244336, 0, ... 02787 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02788 840 NtContinue (1244336, 0, ... 02789 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02790 840 NtContinue (1244336, 0, ... 02791 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02792 840 NtContinue (1244336, 0, ... 02793 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02794 840 NtContinue (1244336, 0, ... 02795 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02796 840 NtContinue (1244336, 0, ... 02797 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02798 840 NtContinue (1244336, 0, ... 02799 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02800 840 NtContinue (1244336, 0, ... 02801 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02802 840 NtContinue (1244336, 0, ... 02803 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02804 840 NtContinue (1244336, 0, ... 02805 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02806 840 NtContinue (1244336, 0, ... 02807 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02808 840 NtContinue (1244336, 0, ... 02809 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02810 840 NtContinue (1244336, 0, ... 02811 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02812 840 NtContinue (1244336, 0, ... 02813 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02814 840 NtContinue (1244336, 0, ... 02815 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02816 840 NtContinue (1244336, 0, ... 02817 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02818 840 NtContinue (1244336, 0, ... 02819 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02820 840 NtContinue (1244336, 0, ... 02821 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02822 840 NtContinue (1244336, 0, ... 02823 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02824 840 NtContinue (1244336, 0, ... 02825 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02826 840 NtContinue (1244336, 0, ... 02827 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02828 840 NtContinue (1244336, 0, ... 02829 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02830 840 NtContinue (1244336, 0, ... 02831 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02832 840 NtContinue (1244336, 0, ... 02833 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02834 840 NtContinue (1244336, 0, ... 02835 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02836 840 NtContinue (1244336, 0, ... 02837 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02838 840 NtContinue (1244336, 0, ... 02839 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02840 840 NtContinue (1244336, 0, ... 02841 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02842 840 NtContinue (1244336, 0, ... 02843 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02844 840 NtContinue (1244336, 0, ... 02845 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02846 840 NtContinue (1244336, 0, ... 02847 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02848 840 NtContinue (1244336, 0, ... 02849 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02850 840 NtContinue (1244336, 0, ... 02851 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02852 840 NtContinue (1244336, 0, ... 02853 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02854 840 NtContinue (1244336, 0, ... 02855 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02856 840 NtContinue (1244336, 0, ... 02857 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02858 840 NtContinue (1244336, 0, ... 02859 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02860 840 NtContinue (1244336, 0, ... 02861 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02862 840 NtContinue (1244336, 0, ... 02863 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02864 840 NtContinue (1244336, 0, ... 02865 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02866 840 NtContinue (1244336, 0, ... 02867 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02868 840 NtContinue (1244336, 0, ... 02869 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02870 840 NtContinue (1244336, 0, ... 02871 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02872 840 NtContinue (1244336, 0, ... 02873 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02874 840 NtContinue (1244336, 0, ... 02875 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02876 840 NtContinue (1244336, 0, ... 02877 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02878 840 NtContinue (1244336, 0, ... 02879 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02880 840 NtContinue (1244336, 0, ... 02881 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02882 840 NtContinue (1244336, 0, ... 02883 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02884 840 NtContinue (1244336, 0, ... 02885 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02886 840 NtContinue (1244336, 0, ... 02887 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02888 840 NtContinue (1244336, 0, ... 02889 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02890 840 NtContinue (1244336, 0, ... 02891 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02892 840 NtContinue (1244336, 0, ... 02893 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02894 840 NtContinue (1244336, 0, ... 02895 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02896 840 NtContinue (1244336, 0, ... 02897 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02898 840 NtContinue (1244336, 0, ... 02899 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02900 840 NtContinue (1244336, 0, ... 02901 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02902 840 NtContinue (1244336, 0, ... 02903 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02904 840 NtContinue (1244336, 0, ... 02905 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02906 840 NtContinue (1244336, 0, ... 02907 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02908 840 NtContinue (1244336, 0, ... 02909 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02910 840 NtContinue (1244336, 0, ... 02911 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02912 840 NtContinue (1244336, 0, ... 02913 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02914 840 NtContinue (1244336, 0, ... 02915 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02916 840 NtContinue (1244336, 0, ... 02917 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02918 840 NtContinue (1244336, 0, ... 02919 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02920 840 NtContinue (1244336, 0, ... 02921 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02922 840 NtContinue (1244336, 0, ... 02923 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02924 840 NtContinue (1244336, 0, ... 02925 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02926 840 NtContinue (1244336, 0, ... 02927 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02928 840 NtContinue (1244336, 0, ... 02929 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02930 840 NtContinue (1244336, 0, ... 02931 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02932 840 NtContinue (1244336, 0, ... 02933 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02934 840 NtContinue (1244336, 0, ... 02935 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02936 840 NtContinue (1244336, 0, ... 02937 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02938 840 NtContinue (1244336, 0, ... 02939 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02940 840 NtContinue (1244336, 0, ... 02941 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02942 840 NtContinue (1244336, 0, ... 02943 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02944 840 NtContinue (1244336, 0, ... 02945 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02946 840 NtContinue (1244336, 0, ... 02947 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02948 840 NtContinue (1244336, 0, ... 02949 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02950 840 NtContinue (1244336, 0, ... 02951 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02952 840 NtContinue (1244336, 0, ... 02953 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02954 840 NtContinue (1244336, 0, ... 02955 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02956 840 NtContinue (1244336, 0, ... 02957 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02958 840 NtContinue (1244336, 0, ... 02959 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02960 840 NtContinue (1244336, 0, ... 02961 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02962 840 NtContinue (1244336, 0, ... 02963 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02964 840 NtContinue (1244336, 0, ... 02965 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02966 840 NtContinue (1244336, 0, ... 02967 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02968 840 NtContinue (1244336, 0, ... 02969 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02970 840 NtContinue (1244336, 0, ... 02971 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02972 840 NtContinue (1244336, 0, ... 02973 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02974 840 NtContinue (1244336, 0, ... 02975 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02976 840 NtContinue (1244336, 0, ... 02977 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02978 840 NtContinue (1244336, 0, ... 02979 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02980 840 NtContinue (1244336, 0, ... 02981 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02982 840 NtContinue (1244336, 0, ... 02983 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02984 840 NtContinue (1244336, 0, ... 02985 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02986 840 NtContinue (1244336, 0, ... 02987 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02988 840 NtContinue (1244336, 0, ... 02989 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02990 840 NtContinue (1244336, 0, ... 02991 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02992 840 NtContinue (1244336, 0, ... 02993 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02994 840 NtContinue (1244336, 0, ... 02995 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02996 840 NtContinue (1244336, 0, ... 02997 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02998 840 NtContinue (1244336, 0, ... 02999 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03000 840 NtContinue (1244336, 0, ... 03001 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03002 840 NtContinue (1244336, 0, ... 03003 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03004 840 NtContinue (1244336, 0, ... 03005 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03006 840 NtContinue (1244336, 0, ... 03007 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03008 840 NtContinue (1244336, 0, ... 03009 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03010 840 NtContinue (1244336, 0, ... 03011 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03012 840 NtContinue (1244336, 0, ... 03013 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03014 840 NtContinue (1244336, 0, ... 03015 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03016 840 NtContinue (1244336, 0, ... 03017 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03018 840 NtContinue (1244336, 0, ... 03019 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03020 840 NtContinue (1244336, 0, ... 03021 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03022 840 NtContinue (1244336, 0, ... 03023 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03024 840 NtContinue (1244336, 0, ... 03025 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03026 840 NtContinue (1244336, 0, ... 03027 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03028 840 NtContinue (1244336, 0, ... 03029 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03030 840 NtContinue (1244336, 0, ... 03031 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03032 840 NtContinue (1244336, 0, ... 03033 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03034 840 NtContinue (1244336, 0, ... 03035 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03036 840 NtContinue (1244336, 0, ... 03037 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03038 840 NtContinue (1244336, 0, ... 03039 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03040 840 NtContinue (1244336, 0, ... 03041 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03042 840 NtContinue (1244336, 0, ... 03043 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03044 840 NtContinue (1244336, 0, ... 03045 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03046 840 NtContinue (1244336, 0, ... 03047 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03048 840 NtContinue (1244336, 0, ... 03049 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03050 840 NtContinue (1244336, 0, ... 03051 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03052 840 NtContinue (1244336, 0, ... 03053 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03054 840 NtContinue (1244336, 0, ... 03055 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03056 840 NtContinue (1244336, 0, ... 03057 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03058 840 NtContinue (1244336, 0, ... 03059 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03060 840 NtContinue (1244336, 0, ... 03061 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03062 840 NtContinue (1244336, 0, ... 03063 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03064 840 NtContinue (1244336, 0, ... 03065 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03066 840 NtContinue (1244336, 0, ... 03067 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03068 840 NtContinue (1244336, 0, ... 03069 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03070 840 NtContinue (1244336, 0, ... 03071 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03072 840 NtContinue (1244336, 0, ... 03073 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03074 840 NtContinue (1244336, 0, ... 03075 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03076 840 NtContinue (1244336, 0, ... 03077 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03078 840 NtContinue (1244336, 0, ... 03079 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03080 840 NtContinue (1244336, 0, ... 03081 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03082 840 NtContinue (1244336, 0, ... 03083 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03084 840 NtContinue (1244336, 0, ... 03085 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03086 840 NtContinue (1244336, 0, ... 03087 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03088 840 NtContinue (1244336, 0, ... 03089 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03090 840 NtContinue (1244336, 0, ... 03091 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03092 840 NtContinue (1244336, 0, ... 03093 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03094 840 NtContinue (1244336, 0, ... 03095 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03096 840 NtContinue (1244336, 0, ... 03097 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03098 840 NtContinue (1244336, 0, ... 03099 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03100 840 NtContinue (1244336, 0, ... 03101 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03102 840 NtContinue (1244336, 0, ... 03103 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03104 840 NtContinue (1244336, 0, ... 03105 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03106 840 NtContinue (1244336, 0, ... 03107 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03108 840 NtContinue (1244336, 0, ... 03109 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03110 840 NtContinue (1244336, 0, ... 03111 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03112 840 NtContinue (1244336, 0, ... 03113 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03114 840 NtContinue (1244336, 0, ... 03115 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03116 840 NtContinue (1244336, 0, ... 03117 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03118 840 NtContinue (1244336, 0, ... 03119 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03120 840 NtContinue (1244336, 0, ... 03121 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03122 840 NtContinue (1244336, 0, ... 03123 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03124 840 NtContinue (1244336, 0, ... 03125 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03126 840 NtContinue (1244336, 0, ... 03127 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03128 840 NtContinue (1244336, 0, ... 03129 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03130 840 NtContinue (1244336, 0, ... 03131 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03132 840 NtContinue (1244336, 0, ... 03133 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03134 840 NtContinue (1244336, 0, ... 03135 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03136 840 NtContinue (1244336, 0, ... 03137 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03138 840 NtContinue (1244336, 0, ... 03139 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03140 840 NtContinue (1244336, 0, ... 03141 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03142 840 NtContinue (1244336, 0, ... 03143 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03144 840 NtContinue (1244336, 0, ... 03145 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03146 840 NtContinue (1244336, 0, ... 03147 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03148 840 NtContinue (1244336, 0, ... 03149 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03150 840 NtContinue (1244336, 0, ... 03151 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03152 840 NtContinue (1244336, 0, ... 03153 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03154 840 NtContinue (1244336, 0, ... 03155 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03156 840 NtContinue (1244336, 0, ... 03157 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03158 840 NtContinue (1244336, 0, ... 03159 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03160 840 NtContinue (1244336, 0, ... 03161 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03162 840 NtContinue (1244336, 0, ... 03163 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03164 840 NtContinue (1244336, 0, ... 03165 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03166 840 NtContinue (1244336, 0, ... 03167 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03168 840 NtContinue (1244336, 0, ... 03169 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03170 840 NtContinue (1244336, 0, ... 03171 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03172 840 NtContinue (1244336, 0, ... 03173 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03174 840 NtContinue (1244336, 0, ... 03175 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03176 840 NtContinue (1244336, 0, ... 03177 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03178 840 NtContinue (1244336, 0, ... 03179 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03180 840 NtContinue (1244336, 0, ... 03181 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03182 840 NtContinue (1244336, 0, ... 03183 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03184 840 NtContinue (1244336, 0, ... 03185 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03186 840 NtContinue (1244336, 0, ... 03187 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03188 840 NtContinue (1244336, 0, ... 03189 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03190 840 NtContinue (1244336, 0, ... 03191 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03192 840 NtContinue (1244336, 0, ... 03193 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03194 840 NtContinue (1244336, 0, ... 03195 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03196 840 NtContinue (1244336, 0, ... 03197 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03198 840 NtContinue (1244336, 0, ... 03199 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03200 840 NtContinue (1244336, 0, ... 03201 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03202 840 NtContinue (1244336, 0, ... 03203 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03204 840 NtContinue (1244336, 0, ... 03205 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03206 840 NtContinue (1244336, 0, ... 03207 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03208 840 NtContinue (1244336, 0, ... 03209 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03210 840 NtContinue (1244336, 0, ... 03211 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03212 840 NtContinue (1244336, 0, ... 03213 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03214 840 NtContinue (1244336, 0, ... 03215 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03216 840 NtContinue (1244336, 0, ... 03217 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03218 840 NtContinue (1244336, 0, ... 03219 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03220 840 NtContinue (1244336, 0, ... 03221 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03222 840 NtContinue (1244336, 0, ... 03223 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03224 840 NtContinue (1244336, 0, ... 03225 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03226 840 NtContinue (1244336, 0, ... 03227 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03228 840 NtContinue (1244336, 0, ... 03229 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03230 840 NtContinue (1244336, 0, ... 03231 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03232 840 NtContinue (1244336, 0, ... 03233 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03234 840 NtContinue (1244336, 0, ... 03235 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03236 840 NtContinue (1244336, 0, ... 03237 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03238 840 NtContinue (1244336, 0, ... 03239 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03240 840 NtContinue (1244336, 0, ... 03241 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03242 840 NtContinue (1244336, 0, ... 03243 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03244 840 NtContinue (1244336, 0, ... 03245 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03246 840 NtContinue (1244336, 0, ... 03247 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03248 840 NtContinue (1244336, 0, ... 03249 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03250 840 NtContinue (1244336, 0, ... 03251 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03252 840 NtContinue (1244336, 0, ... 03253 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03254 840 NtContinue (1244336, 0, ... 03255 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03256 840 NtContinue (1244336, 0, ... 03257 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03258 840 NtContinue (1244336, 0, ... 03259 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03260 840 NtContinue (1244336, 0, ... 03261 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03262 840 NtContinue (1244336, 0, ... 03263 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03264 840 NtContinue (1244336, 0, ... 03265 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03266 840 NtContinue (1244336, 0, ... 03267 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03268 840 NtContinue (1244336, 0, ... 03269 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03270 840 NtContinue (1244336, 0, ... 03271 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03272 840 NtContinue (1244336, 0, ... 03273 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03274 840 NtContinue (1244336, 0, ... 03275 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03276 840 NtContinue (1244336, 0, ... 03277 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03278 840 NtContinue (1244336, 0, ... 03279 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03280 840 NtContinue (1244336, 0, ... 03281 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03282 840 NtContinue (1244336, 0, ... 03283 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03284 840 NtContinue (1244336, 0, ... 03285 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03286 840 NtContinue (1244336, 0, ... 03287 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03288 840 NtContinue (1244336, 0, ... 03289 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03290 840 NtContinue (1244336, 0, ... 03291 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03292 840 NtContinue (1244336, 0, ... 03293 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03294 840 NtContinue (1244336, 0, ... 03295 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03296 840 NtContinue (1244336, 0, ... 03297 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03298 840 NtContinue (1244336, 0, ... 03299 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03300 840 NtContinue (1244336, 0, ... 03301 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03302 840 NtContinue (1244336, 0, ... 03303 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03304 840 NtContinue (1244336, 0, ... 03305 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03306 840 NtContinue (1244336, 0, ... 03307 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03308 840 NtContinue (1244336, 0, ... 03309 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03310 840 NtContinue (1244336, 0, ... 03311 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03312 840 NtContinue (1244336, 0, ... 03313 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03314 840 NtContinue (1244336, 0, ... 03315 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03316 840 NtContinue (1244336, 0, ... 03317 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03318 840 NtContinue (1244336, 0, ... 03319 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03320 840 NtContinue (1244336, 0, ... 03321 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03322 840 NtContinue (1244336, 0, ... 03323 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03324 840 NtContinue (1244336, 0, ... 03325 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03326 840 NtContinue (1244336, 0, ... 03327 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03328 840 NtContinue (1244336, 0, ... 03329 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03330 840 NtContinue (1244336, 0, ... 03331 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03332 840 NtContinue (1244336, 0, ... 03333 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03334 840 NtContinue (1244336, 0, ... 03335 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03336 840 NtContinue (1244336, 0, ... 03337 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03338 840 NtContinue (1244336, 0, ... 03339 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03340 840 NtContinue (1244336, 0, ... 03341 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03342 840 NtContinue (1244336, 0, ... 03343 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03344 840 NtContinue (1244336, 0, ... 03345 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03346 840 NtContinue (1244336, 0, ... 03347 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03348 840 NtContinue (1244336, 0, ... 03349 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03350 840 NtContinue (1244336, 0, ... 03351 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03352 840 NtContinue (1244336, 0, ... 03353 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03354 840 NtContinue (1244336, 0, ... 03355 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03356 840 NtContinue (1244336, 0, ... 03357 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03358 840 NtContinue (1244336, 0, ... 03359 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03360 840 NtContinue (1244336, 0, ... 03361 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03362 840 NtContinue (1244336, 0, ... 03363 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03364 840 NtContinue (1244336, 0, ... 03365 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03366 840 NtContinue (1244336, 0, ... 03367 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03368 840 NtContinue (1244336, 0, ... 03369 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03370 840 NtContinue (1244336, 0, ... 03371 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03372 840 NtContinue (1244336, 0, ... 03373 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03374 840 NtContinue (1244336, 0, ... 03375 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03376 840 NtContinue (1244336, 0, ... 03377 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03378 840 NtContinue (1244336, 0, ... 03379 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03380 840 NtContinue (1244336, 0, ... 03381 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03382 840 NtContinue (1244336, 0, ... 03383 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03384 840 NtContinue (1244336, 0, ... 03385 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03386 840 NtContinue (1244336, 0, ... 03387 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03388 840 NtContinue (1244336, 0, ... 03389 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03390 840 NtContinue (1244336, 0, ... 03391 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03392 840 NtContinue (1244336, 0, ... 03393 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03394 840 NtContinue (1244336, 0, ... 03395 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03396 840 NtContinue (1244336, 0, ... 03397 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03398 840 NtContinue (1244336, 0, ... 03399 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03400 840 NtContinue (1244336, 0, ... 03401 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03402 840 NtContinue (1244336, 0, ... 03403 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03404 840 NtContinue (1244336, 0, ... 03405 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03406 840 NtContinue (1244336, 0, ... 03407 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03408 840 NtContinue (1244336, 0, ... 03409 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03410 840 NtContinue (1244336, 0, ... 03411 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03412 840 NtContinue (1244336, 0, ... 03413 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03414 840 NtContinue (1244336, 0, ... 03415 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03416 840 NtContinue (1244336, 0, ... 03417 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03418 840 NtContinue (1244336, 0, ... 03419 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03420 840 NtContinue (1244336, 0, ... 03421 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03422 840 NtContinue (1244336, 0, ... 03423 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03424 840 NtContinue (1244336, 0, ... 03425 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03426 840 NtContinue (1244336, 0, ... 03427 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03428 840 NtContinue (1244336, 0, ... 03429 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03430 840 NtContinue (1244336, 0, ... 03431 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03432 840 NtContinue (1244336, 0, ... 03433 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03434 840 NtContinue (1244336, 0, ... 03435 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03436 840 NtContinue (1244336, 0, ... 03437 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03438 840 NtContinue (1244336, 0, ... 03439 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03440 840 NtContinue (1244336, 0, ... 03441 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03442 840 NtContinue (1244336, 0, ... 03443 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03444 840 NtContinue (1244336, 0, ... 03445 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03446 840 NtContinue (1244336, 0, ... 03447 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03448 840 NtContinue (1244336, 0, ... 03449 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03450 840 NtContinue (1244336, 0, ... 03451 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03452 840 NtContinue (1244336, 0, ... 03453 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03454 840 NtContinue (1244336, 0, ... 03455 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03456 840 NtContinue (1244336, 0, ... 03457 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03458 840 NtContinue (1244336, 0, ... 03459 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03460 840 NtContinue (1244336, 0, ... 03461 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03462 840 NtContinue (1244336, 0, ... 03463 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03464 840 NtContinue (1244336, 0, ... 03465 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03466 840 NtContinue (1244336, 0, ... 03467 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03468 840 NtContinue (1244336, 0, ... 03469 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03470 840 NtContinue (1244336, 0, ... 03471 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03472 840 NtContinue (1244336, 0, ... 03473 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03474 840 NtContinue (1244336, 0, ... 03475 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03476 840 NtContinue (1244336, 0, ... 03477 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03478 840 NtContinue (1244336, 0, ... 03479 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03480 840 NtContinue (1244336, 0, ... 03481 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03482 840 NtContinue (1244336, 0, ... 03483 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03484 840 NtContinue (1244336, 0, ... 03485 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03486 840 NtContinue (1244336, 0, ... 03487 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03488 840 NtContinue (1244336, 0, ... 03489 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03490 840 NtContinue (1244336, 0, ... 03491 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03492 840 NtContinue (1244336, 0, ... 03493 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03494 840 NtContinue (1244336, 0, ... 03495 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03496 840 NtContinue (1244336, 0, ... 03497 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03498 840 NtContinue (1244336, 0, ... 03499 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03500 840 NtContinue (1244336, 0, ... 03501 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03502 840 NtContinue (1244336, 0, ... 03503 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03504 840 NtContinue (1244336, 0, ... 03505 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03506 840 NtContinue (1244336, 0, ... 03507 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03508 840 NtContinue (1244336, 0, ... 03509 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03510 840 NtContinue (1244336, 0, ... 03511 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03512 840 NtContinue (1244336, 0, ... 03513 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03514 840 NtContinue (1244336, 0, ... 03515 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03516 840 NtContinue (1244336, 0, ... 03517 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03518 840 NtContinue (1244336, 0, ... 03519 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03520 840 NtContinue (1244336, 0, ... 03521 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03522 840 NtContinue (1244336, 0, ... 03523 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03524 840 NtContinue (1244336, 0, ... 03525 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03526 840 NtContinue (1244336, 0, ... 03527 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03528 840 NtContinue (1244336, 0, ... 03529 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03530 840 NtContinue (1244336, 0, ... 03531 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03532 840 NtContinue (1244336, 0, ... 03533 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03534 840 NtContinue (1244336, 0, ... 03535 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03536 840 NtContinue (1244336, 0, ... 03537 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03538 840 NtContinue (1244336, 0, ... 03539 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03540 840 NtContinue (1244336, 0, ... 03541 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03542 840 NtContinue (1244336, 0, ... 03543 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03544 840 NtContinue (1244336, 0, ... 03545 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03546 840 NtContinue (1244336, 0, ... 03547 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03548 840 NtContinue (1244336, 0, ... 03549 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03550 840 NtContinue (1244336, 0, ... 03551 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03552 840 NtContinue (1244336, 0, ... 03553 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03554 840 NtContinue (1244336, 0, ... 03555 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03556 840 NtContinue (1244336, 0, ... 03557 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03558 840 NtContinue (1244336, 0, ... 03559 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03560 840 NtContinue (1244336, 0, ... 03561 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03562 840 NtContinue (1244336, 0, ... 03563 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03564 840 NtContinue (1244336, 0, ... 03565 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03566 840 NtContinue (1244336, 0, ... 03567 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03568 840 NtContinue (1244336, 0, ... 03569 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03570 840 NtContinue (1244336, 0, ... 03571 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03572 840 NtContinue (1244336, 0, ... 03573 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03574 840 NtContinue (1244336, 0, ... 03575 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03576 840 NtContinue (1244336, 0, ... 03577 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03578 840 NtContinue (1244336, 0, ... 03579 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03580 840 NtContinue (1244336, 0, ... 03581 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03582 840 NtContinue (1244336, 0, ... 03583 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03584 840 NtContinue (1244336, 0, ... 03585 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03586 840 NtContinue (1244336, 0, ... 03587 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03588 840 NtContinue (1244336, 0, ... 03589 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03590 840 NtContinue (1244336, 0, ... 03591 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03592 840 NtContinue (1244336, 0, ... 03593 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03594 840 NtContinue (1244336, 0, ... 03595 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03596 840 NtContinue (1244336, 0, ... 03597 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03598 840 NtContinue (1244336, 0, ... 03599 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03600 840 NtContinue (1244336, 0, ... 03601 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03602 840 NtContinue (1244336, 0, ... 03603 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03604 840 NtContinue (1244336, 0, ... 03605 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03606 840 NtContinue (1244336, 0, ... 03607 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03608 840 NtContinue (1244336, 0, ... 03609 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03610 840 NtContinue (1244336, 0, ... 03611 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03612 840 NtContinue (1244336, 0, ... 03613 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03614 840 NtContinue (1244336, 0, ... 03615 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03616 840 NtContinue (1244336, 0, ... 03617 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03618 840 NtContinue (1244336, 0, ... 03619 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03620 840 NtContinue (1244336, 0, ... 03621 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03622 840 NtContinue (1244336, 0, ... 03623 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03624 840 NtContinue (1244336, 0, ... 03625 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03626 840 NtContinue (1244336, 0, ... 03627 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03628 840 NtContinue (1244336, 0, ... 03629 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03630 840 NtContinue (1244336, 0, ... 03631 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03632 840 NtContinue (1244336, 0, ... 03633 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03634 840 NtContinue (1244336, 0, ... 03635 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03636 840 NtContinue (1244336, 0, ... 03637 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03638 840 NtContinue (1244336, 0, ... 03639 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03640 840 NtContinue (1244336, 0, ... 03641 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03642 840 NtContinue (1244336, 0, ... 03643 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03644 840 NtContinue (1244336, 0, ... 03645 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03646 840 NtContinue (1244336, 0, ... 03647 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03648 840 NtContinue (1244336, 0, ... 03649 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03650 840 NtContinue (1244336, 0, ... 03651 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03652 840 NtContinue (1244336, 0, ... 03653 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03654 840 NtContinue (1244336, 0, ... 03655 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03656 840 NtContinue (1244336, 0, ... 03657 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03658 840 NtContinue (1244336, 0, ... 03659 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03660 840 NtContinue (1244336, 0, ... 03661 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03662 840 NtContinue (1244336, 0, ... 03663 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03664 840 NtContinue (1244336, 0, ... 03665 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03666 840 NtContinue (1244336, 0, ... 03667 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03668 840 NtContinue (1244336, 0, ... 03669 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03670 840 NtContinue (1244336, 0, ... 03671 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03672 840 NtContinue (1244336, 0, ... 03673 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03674 840 NtContinue (1244336, 0, ... 03675 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03676 840 NtContinue (1244336, 0, ... 03677 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03678 840 NtContinue (1244336, 0, ... 03679 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03680 840 NtContinue (1244336, 0, ... 03681 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03682 840 NtContinue (1244336, 0, ... 03683 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03684 840 NtContinue (1244336, 0, ... 03685 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03686 840 NtContinue (1244336, 0, ... 03687 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03688 840 NtContinue (1244336, 0, ... 03689 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03690 840 NtContinue (1244336, 0, ... 03691 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03692 840 NtContinue (1244336, 0, ... 03693 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03694 840 NtContinue (1244336, 0, ... 03695 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03696 840 NtContinue (1244336, 0, ... 03697 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03698 840 NtContinue (1244336, 0, ... 03699 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03700 840 NtContinue (1244336, 0, ... 03701 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03702 840 NtContinue (1244336, 0, ... 03703 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03704 840 NtContinue (1244336, 0, ... 03705 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03706 840 NtContinue (1244336, 0, ... 03707 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03708 840 NtContinue (1244336, 0, ... 03709 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03710 840 NtContinue (1244336, 0, ... 03711 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03712 840 NtContinue (1244336, 0, ... 03713 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03714 840 NtContinue (1244336, 0, ... 03715 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03716 840 NtContinue (1244336, 0, ... 03717 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03718 840 NtContinue (1244336, 0, ... 03719 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03720 840 NtContinue (1244336, 0, ... 03721 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03722 840 NtContinue (1244336, 0, ... 03723 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03724 840 NtContinue (1244336, 0, ... 03725 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03726 840 NtContinue (1244336, 0, ... 03727 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03728 840 NtContinue (1244336, 0, ... 03729 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03730 840 NtContinue (1244336, 0, ... 03731 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03732 840 NtContinue (1244336, 0, ... 03733 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03734 840 NtContinue (1244336, 0, ... 03735 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03736 840 NtContinue (1244336, 0, ... 03737 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03738 840 NtContinue (1244336, 0, ... 03739 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03740 840 NtContinue (1244336, 0, ... 03741 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03742 840 NtContinue (1244336, 0, ... 03743 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03744 840 NtContinue (1244336, 0, ... 03745 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03746 840 NtContinue (1244336, 0, ... 03747 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03748 840 NtContinue (1244336, 0, ... 03749 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03750 840 NtContinue (1244336, 0, ... 03751 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03752 840 NtContinue (1244336, 0, ... 03753 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03754 840 NtContinue (1244336, 0, ... 03755 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03756 840 NtContinue (1244336, 0, ... 03757 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03758 840 NtContinue (1244336, 0, ... 03759 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03760 840 NtContinue (1244336, 0, ... 03761 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03762 840 NtContinue (1244336, 0, ... 03763 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03764 840 NtContinue (1244336, 0, ... 03765 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03766 840 NtContinue (1244336, 0, ... 03767 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03768 840 NtContinue (1244336, 0, ... 03769 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03770 840 NtContinue (1244336, 0, ... 03771 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03772 840 NtContinue (1244336, 0, ... 03773 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03774 840 NtContinue (1244336, 0, ... 03775 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03776 840 NtContinue (1244336, 0, ... 03777 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03778 840 NtContinue (1244336, 0, ... 03779 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03780 840 NtContinue (1244336, 0, ... 03781 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03782 840 NtContinue (1244336, 0, ... 03783 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03784 840 NtContinue (1244336, 0, ... 03785 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03786 840 NtContinue (1244336, 0, ... 03787 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03788 840 NtContinue (1244336, 0, ... 03789 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03790 840 NtContinue (1244336, 0, ... 03791 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03792 840 NtContinue (1244336, 0, ... 03793 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03794 840 NtContinue (1244336, 0, ... 03795 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03796 840 NtContinue (1244336, 0, ... 03797 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03798 840 NtContinue (1244336, 0, ... 03799 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03800 840 NtContinue (1244336, 0, ... 03801 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03802 840 NtContinue (1244336, 0, ... 03803 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03804 840 NtContinue (1244336, 0, ... 03805 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03806 840 NtContinue (1244336, 0, ... 03807 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03808 840 NtContinue (1244336, 0, ... 03809 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03810 840 NtContinue (1244336, 0, ... 03811 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03812 840 NtContinue (1244336, 0, ... 03813 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03814 840 NtContinue (1244336, 0, ... 03815 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03816 840 NtContinue (1244336, 0, ... 03817 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03818 840 NtContinue (1244336, 0, ... 03819 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03820 840 NtContinue (1244336, 0, ... 03821 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03822 840 NtContinue (1244336, 0, ... 03823 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03824 840 NtContinue (1244336, 0, ... 03825 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03826 840 NtContinue (1244336, 0, ... 03827 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03828 840 NtContinue (1244336, 0, ... 03829 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03830 840 NtContinue (1244336, 0, ... 03831 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03832 840 NtContinue (1244336, 0, ... 03833 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03834 840 NtContinue (1244336, 0, ... 03835 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03836 840 NtContinue (1244336, 0, ... 03837 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03838 840 NtContinue (1244336, 0, ... 03839 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03840 840 NtContinue (1244336, 0, ... 03841 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03842 840 NtContinue (1244336, 0, ... 03843 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03844 840 NtContinue (1244336, 0, ... 03845 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03846 840 NtContinue (1244336, 0, ... 03847 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03848 840 NtContinue (1244336, 0, ... 03849 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03850 840 NtContinue (1244336, 0, ... 03851 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03852 840 NtContinue (1244336, 0, ... 03853 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03854 840 NtContinue (1244336, 0, ... 03855 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03856 840 NtContinue (1244336, 0, ... 03857 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03858 840 NtContinue (1244336, 0, ... 03859 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03860 840 NtContinue (1244336, 0, ... 03861 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03862 840 NtContinue (1244336, 0, ... 03863 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03864 840 NtContinue (1244336, 0, ... 03865 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03866 840 NtContinue (1244336, 0, ... 03867 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03868 840 NtContinue (1244336, 0, ... 03869 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03870 840 NtContinue (1244336, 0, ... 03871 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03872 840 NtContinue (1244336, 0, ... 03873 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03874 840 NtContinue (1244336, 0, ... 03875 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03876 840 NtContinue (1244336, 0, ... 03877 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03878 840 NtContinue (1244336, 0, ... 03879 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03880 840 NtContinue (1244336, 0, ... 03881 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03882 840 NtContinue (1244336, 0, ... 03883 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03884 840 NtContinue (1244336, 0, ... 03885 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03886 840 NtContinue (1244336, 0, ... 03887 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03888 840 NtContinue (1244336, 0, ... 03889 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03890 840 NtContinue (1244336, 0, ... 03891 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03892 840 NtContinue (1244336, 0, ... 03893 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03894 840 NtContinue (1244336, 0, ... 03895 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03896 840 NtContinue (1244336, 0, ... 03897 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03898 840 NtContinue (1244336, 0, ... 03899 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03900 840 NtContinue (1244336, 0, ... 03901 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03902 840 NtContinue (1244336, 0, ... 03903 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03904 840 NtContinue (1244336, 0, ... 03905 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03906 840 NtContinue (1244336, 0, ... 03907 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03908 840 NtContinue (1244336, 0, ... 03909 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03910 840 NtContinue (1244336, 0, ... 03911 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03912 840 NtContinue (1244336, 0, ... 03913 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03914 840 NtContinue (1244336, 0, ... 03915 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03916 840 NtContinue (1244336, 0, ... 03917 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03918 840 NtContinue (1244336, 0, ... 03919 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03920 840 NtContinue (1244336, 0, ... 03921 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03922 840 NtContinue (1244336, 0, ... 03923 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03924 840 NtContinue (1244336, 0, ... 03925 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03926 840 NtContinue (1244336, 0, ... 03927 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03928 840 NtContinue (1244336, 0, ... 03929 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03930 840 NtContinue (1244336, 0, ... 03931 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03932 840 NtContinue (1244336, 0, ... 03933 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03934 840 NtContinue (1244336, 0, ... 03935 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03936 840 NtContinue (1244336, 0, ... 03937 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03938 840 NtContinue (1244336, 0, ... 03939 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03940 840 NtContinue (1244336, 0, ... 03941 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03942 840 NtContinue (1244336, 0, ... 03943 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03944 840 NtContinue (1244336, 0, ... 03945 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03946 840 NtContinue (1244336, 0, ... 03947 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03948 840 NtContinue (1244336, 0, ... 03949 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03950 840 NtContinue (1244336, 0, ... 03951 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03952 840 NtContinue (1244336, 0, ... 03953 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03954 840 NtContinue (1244336, 0, ... 03955 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03956 840 NtContinue (1244336, 0, ... 03957 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03958 840 NtContinue (1244336, 0, ... 03959 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03960 840 NtContinue (1244336, 0, ... 03961 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03962 840 NtContinue (1244336, 0, ... 03963 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03964 840 NtContinue (1244336, 0, ... 03965 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03966 840 NtContinue (1244336, 0, ... 03967 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03968 840 NtContinue (1244336, 0, ... 03969 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03970 840 NtContinue (1244336, 0, ... 03971 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03972 840 NtContinue (1244336, 0, ... 03973 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03974 840 NtContinue (1244336, 0, ... 03975 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03976 840 NtContinue (1244336, 0, ... 03977 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03978 840 NtContinue (1244336, 0, ... 03979 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03980 840 NtContinue (1244336, 0, ... 03981 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03982 840 NtContinue (1244336, 0, ... 03983 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03984 840 NtContinue (1244336, 0, ... 03985 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03986 840 NtContinue (1244336, 0, ... 03987 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03988 840 NtContinue (1244336, 0, ... 03989 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03990 840 NtContinue (1244336, 0, ... 03991 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03992 840 NtContinue (1244336, 0, ... 03993 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03994 840 NtContinue (1244336, 0, ... 03995 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03996 840 NtContinue (1244336, 0, ... 03997 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03998 840 NtContinue (1244336, 0, ... 03999 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04000 840 NtContinue (1244336, 0, ... 04001 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04002 840 NtContinue (1244336, 0, ... 04003 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04004 840 NtContinue (1244336, 0, ... 04005 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04006 840 NtContinue (1244336, 0, ... 04007 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04008 840 NtContinue (1244336, 0, ... 04009 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04010 840 NtContinue (1244336, 0, ... 04011 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04012 840 NtContinue (1244336, 0, ... 04013 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04014 840 NtContinue (1244336, 0, ... 04015 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04016 840 NtContinue (1244336, 0, ... 04017 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04018 840 NtContinue (1244336, 0, ... 04019 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04020 840 NtContinue (1244336, 0, ... 04021 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04022 840 NtContinue (1244336, 0, ... 04023 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04024 840 NtContinue (1244336, 0, ... 04025 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04026 840 NtContinue (1244336, 0, ... 04027 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04028 840 NtContinue (1244336, 0, ... 04029 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04030 840 NtContinue (1244336, 0, ... 04031 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04032 840 NtContinue (1244336, 0, ... 04033 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04034 840 NtContinue (1244336, 0, ... 04035 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04036 840 NtContinue (1244336, 0, ... 04037 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04038 840 NtContinue (1244336, 0, ... 04039 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04040 840 NtContinue (1244336, 0, ... 04041 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04042 840 NtContinue (1244336, 0, ... 04043 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04044 840 NtContinue (1244336, 0, ... 04045 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04046 840 NtContinue (1244336, 0, ... 04047 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04048 840 NtContinue (1244336, 0, ... 04049 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04050 840 NtContinue (1244336, 0, ... 04051 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04052 840 NtContinue (1244336, 0, ... 04053 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04054 840 NtContinue (1244336, 0, ... 04055 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04056 840 NtContinue (1244336, 0, ... 04057 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04058 840 NtContinue (1244336, 0, ... 04059 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04060 840 NtContinue (1244336, 0, ... 04061 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04062 840 NtContinue (1244336, 0, ... 04063 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04064 840 NtContinue (1244336, 0, ... 04065 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04066 840 NtContinue (1244336, 0, ... 04067 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04068 840 NtContinue (1244336, 0, ... 04069 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04070 840 NtContinue (1244336, 0, ... 04071 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04072 840 NtContinue (1244336, 0, ... 04073 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04074 840 NtContinue (1244336, 0, ... 04075 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04076 840 NtContinue (1244336, 0, ... 04077 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04078 840 NtContinue (1244336, 0, ... 04079 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04080 840 NtContinue (1244336, 0, ... 04081 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04082 840 NtContinue (1244336, 0, ... 04083 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04084 840 NtContinue (1244336, 0, ... 04085 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04086 840 NtContinue (1244336, 0, ... 04087 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04088 840 NtContinue (1244336, 0, ... 04089 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04090 840 NtContinue (1244336, 0, ... 04091 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04092 840 NtContinue (1244336, 0, ... 04093 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04094 840 NtContinue (1244336, 0, ... 04095 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04096 840 NtContinue (1244336, 0, ... 04097 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04098 840 NtContinue (1244336, 0, ... 04099 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04100 840 NtContinue (1244336, 0, ... 04101 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04102 840 NtContinue (1244336, 0, ... 04103 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04104 840 NtContinue (1244336, 0, ... 04105 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04106 840 NtContinue (1244336, 0, ... 04107 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04108 840 NtContinue (1244336, 0, ... 04109 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04110 840 NtContinue (1244336, 0, ... 04111 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04112 840 NtContinue (1244336, 0, ... 04113 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04114 840 NtContinue (1244336, 0, ... 04115 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04116 840 NtContinue (1244336, 0, ... 04117 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04118 840 NtContinue (1244336, 0, ... 04119 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04120 840 NtContinue (1244336, 0, ... 04121 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04122 840 NtContinue (1244336, 0, ... 04123 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04124 840 NtContinue (1244336, 0, ... 04125 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04126 840 NtContinue (1244336, 0, ... 04127 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04128 840 NtContinue (1244336, 0, ... 04129 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04130 840 NtContinue (1244336, 0, ... 04131 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04132 840 NtContinue (1244336, 0, ... 04133 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04134 840 NtContinue (1244336, 0, ... 04135 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04136 840 NtContinue (1244336, 0, ... 04137 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04138 840 NtContinue (1244336, 0, ... 04139 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04140 840 NtContinue (1244336, 0, ... 04141 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04142 840 NtContinue (1244336, 0, ... 04143 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04144 840 NtContinue (1244336, 0, ... 04145 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04146 840 NtContinue (1244336, 0, ... 04147 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04148 840 NtContinue (1244336, 0, ... 04149 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04150 840 NtContinue (1244336, 0, ... 04151 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04152 840 NtContinue (1244336, 0, ... 04153 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04154 840 NtContinue (1244336, 0, ... 04155 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04156 840 NtContinue (1244336, 0, ... 04157 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04158 840 NtContinue (1244336, 0, ... 04159 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04160 840 NtContinue (1244336, 0, ... 04161 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04162 840 NtContinue (1244336, 0, ... 04163 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04164 840 NtContinue (1244336, 0, ... 04165 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04166 840 NtContinue (1244336, 0, ... 04167 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04168 840 NtContinue (1244336, 0, ... 04169 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04170 840 NtContinue (1244336, 0, ... 04171 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04172 840 NtContinue (1244336, 0, ... 04173 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04174 840 NtContinue (1244336, 0, ... 04175 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04176 840 NtContinue (1244336, 0, ... 04177 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04178 840 NtContinue (1244336, 0, ... 04179 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04180 840 NtContinue (1244336, 0, ... 04181 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04182 840 NtContinue (1244336, 0, ... 04183 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04184 840 NtContinue (1244336, 0, ... 04185 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04186 840 NtContinue (1244336, 0, ... 04187 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04188 840 NtContinue (1244336, 0, ... 04189 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04190 840 NtContinue (1244336, 0, ... 04191 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04192 840 NtContinue (1244336, 0, ... 04193 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04194 840 NtContinue (1244336, 0, ... 04195 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04196 840 NtContinue (1244336, 0, ... 04197 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04198 840 NtContinue (1244336, 0, ... 04199 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04200 840 NtContinue (1244336, 0, ... 04201 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04202 840 NtContinue (1244336, 0, ... 04203 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04204 840 NtContinue (1244336, 0, ... 04205 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04206 840 NtContinue (1244336, 0, ... 04207 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04208 840 NtContinue (1244336, 0, ... 04209 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04210 840 NtContinue (1244336, 0, ... 04211 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04212 840 NtContinue (1244336, 0, ... 04213 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04214 840 NtContinue (1244336, 0, ... 04215 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04216 840 NtContinue (1244336, 0, ... 04217 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04218 840 NtContinue (1244336, 0, ... 04219 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04220 840 NtContinue (1244336, 0, ... 04221 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04222 840 NtContinue (1244336, 0, ... 04223 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04224 840 NtContinue (1244336, 0, ... 04225 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04226 840 NtContinue (1244336, 0, ... 04227 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04228 840 NtContinue (1244336, 0, ... 04229 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04230 840 NtContinue (1244336, 0, ... 04231 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04232 840 NtContinue (1244336, 0, ... 04233 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04234 840 NtContinue (1244336, 0, ... 04235 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04236 840 NtContinue (1244336, 0, ... 04237 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04238 840 NtContinue (1244336, 0, ... 04239 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04240 840 NtContinue (1244336, 0, ... 04241 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04242 840 NtContinue (1244336, 0, ... 04243 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04244 840 NtContinue (1244336, 0, ... 04245 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04246 840 NtContinue (1244336, 0, ... 04247 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04248 840 NtContinue (1244336, 0, ... 04249 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04250 840 NtContinue (1244336, 0, ... 04251 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04252 840 NtContinue (1244336, 0, ... 04253 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04254 840 NtContinue (1244336, 0, ... 04255 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04256 840 NtContinue (1244336, 0, ... 04257 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04258 840 NtContinue (1244336, 0, ... 04259 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04260 840 NtContinue (1244336, 0, ... 04261 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04262 840 NtContinue (1244336, 0, ... 04263 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04264 840 NtContinue (1244336, 0, ... 04265 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04266 840 NtContinue (1244336, 0, ... 04267 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04268 840 NtContinue (1244336, 0, ... 04269 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04270 840 NtContinue (1244336, 0, ... 04271 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04272 840 NtContinue (1244336, 0, ... 04273 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04274 840 NtContinue (1244336, 0, ... 04275 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04276 840 NtContinue (1244336, 0, ... 04277 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04278 840 NtContinue (1244336, 0, ... 04279 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04280 840 NtContinue (1244336, 0, ... 04281 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04282 840 NtContinue (1244336, 0, ... 04283 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04284 840 NtContinue (1244336, 0, ... 04285 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04286 840 NtContinue (1244336, 0, ... 04287 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04288 840 NtContinue (1244336, 0, ... 04289 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04290 840 NtContinue (1244336, 0, ... 04291 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04292 840 NtContinue (1244336, 0, ... 04293 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04294 840 NtContinue (1244336, 0, ... 04295 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04296 840 NtContinue (1244336, 0, ... 04297 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04298 840 NtContinue (1244336, 0, ... 04299 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04300 840 NtContinue (1244336, 0, ... 04301 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04302 840 NtContinue (1244336, 0, ... 04303 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04304 840 NtContinue (1244336, 0, ... 04305 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04306 840 NtContinue (1244336, 0, ... 04307 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04308 840 NtContinue (1244336, 0, ... 04309 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04310 840 NtContinue (1244336, 0, ... 04311 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04312 840 NtContinue (1244336, 0, ... 04313 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04314 840 NtContinue (1244336, 0, ... 04315 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04316 840 NtContinue (1244336, 0, ... 04317 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04318 840 NtContinue (1244336, 0, ... 04319 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04320 840 NtContinue (1244336, 0, ... 04321 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04322 840 NtContinue (1244336, 0, ... 04323 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04324 840 NtContinue (1244336, 0, ... 04325 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04326 840 NtContinue (1244336, 0, ... 04327 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04328 840 NtContinue (1244336, 0, ... 04329 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04330 840 NtContinue (1244336, 0, ... 04331 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04332 840 NtContinue (1244336, 0, ... 04333 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04334 840 NtContinue (1244336, 0, ... 04335 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04336 840 NtContinue (1244336, 0, ... 04337 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04338 840 NtContinue (1244336, 0, ... 04339 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04340 840 NtContinue (1244336, 0, ... 04341 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04342 840 NtContinue (1244336, 0, ... 04343 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04344 840 NtContinue (1244336, 0, ... 04345 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04346 840 NtContinue (1244336, 0, ... 04347 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04348 840 NtContinue (1244336, 0, ... 04349 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04350 840 NtContinue (1244336, 0, ... 04351 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04352 840 NtContinue (1244336, 0, ... 04353 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04354 840 NtContinue (1244336, 0, ... 04355 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04356 840 NtContinue (1244336, 0, ... 04357 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04358 840 NtContinue (1244336, 0, ... 04359 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04360 840 NtContinue (1244336, 0, ... 04361 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04362 840 NtContinue (1244336, 0, ... 04363 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04364 840 NtContinue (1244336, 0, ... 04365 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04366 840 NtContinue (1244336, 0, ... 04367 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04368 840 NtContinue (1244336, 0, ... 04369 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04370 840 NtContinue (1244336, 0, ... 04371 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04372 840 NtContinue (1244336, 0, ... 04373 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04374 840 NtContinue (1244336, 0, ... 04375 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04376 840 NtContinue (1244336, 0, ... 04377 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04378 840 NtContinue (1244336, 0, ... 04379 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04380 840 NtContinue (1244336, 0, ... 04381 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04382 840 NtContinue (1244336, 0, ... 04383 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04384 840 NtContinue (1244336, 0, ... 04385 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04386 840 NtContinue (1244336, 0, ... 04387 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04388 840 NtContinue (1244336, 0, ... 04389 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04390 840 NtContinue (1244336, 0, ... 04391 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04392 840 NtContinue (1244336, 0, ... 04393 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04394 840 NtContinue (1244336, 0, ... 04395 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04396 840 NtContinue (1244336, 0, ... 04397 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04398 840 NtContinue (1244336, 0, ... 04399 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04400 840 NtContinue (1244336, 0, ... 04401 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04402 840 NtContinue (1244336, 0, ... 04403 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04404 840 NtContinue (1244336, 0, ... 04405 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04406 840 NtContinue (1244336, 0, ... 04407 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04408 840 NtContinue (1244336, 0, ... 04409 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04410 840 NtContinue (1244336, 0, ... 04411 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04412 840 NtContinue (1244336, 0, ... 04413 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04414 840 NtContinue (1244336, 0, ... 04415 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04416 840 NtContinue (1244336, 0, ... 04417 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04418 840 NtContinue (1244336, 0, ... 04419 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04420 840 NtContinue (1244336, 0, ... 04421 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04422 840 NtContinue (1244336, 0, ... 04423 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04424 840 NtContinue (1244336, 0, ... 04425 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04426 840 NtContinue (1244336, 0, ... 04427 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04428 840 NtContinue (1244336, 0, ... 04429 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04430 840 NtContinue (1244336, 0, ... 04431 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04432 840 NtContinue (1244336, 0, ... 04433 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04434 840 NtContinue (1244336, 0, ... 04435 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04436 840 NtContinue (1244336, 0, ... 04437 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04438 840 NtContinue (1244336, 0, ... 04439 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04440 840 NtContinue (1244336, 0, ... 04441 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04442 840 NtContinue (1244336, 0, ... 04443 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04444 840 NtContinue (1244336, 0, ... 04445 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04446 840 NtContinue (1244336, 0, ... 04447 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04448 840 NtContinue (1244336, 0, ... 04449 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04450 840 NtContinue (1244336, 0, ... 04451 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04452 840 NtContinue (1244336, 0, ... 04453 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04454 840 NtContinue (1244336, 0, ... 04455 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04456 840 NtContinue (1244336, 0, ... 04457 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04458 840 NtContinue (1244336, 0, ... 04459 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04460 840 NtContinue (1244336, 0, ... 04461 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04462 840 NtContinue (1244336, 0, ... 04463 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04464 840 NtContinue (1244336, 0, ... 04465 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04466 840 NtContinue (1244336, 0, ... 04467 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04468 840 NtContinue (1244336, 0, ... 04469 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04470 840 NtContinue (1244336, 0, ... 04471 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04472 840 NtContinue (1244336, 0, ... 04473 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04474 840 NtContinue (1244336, 0, ... 04475 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04476 840 NtContinue (1244336, 0, ... 04477 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04478 840 NtContinue (1244336, 0, ... 04479 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04480 840 NtContinue (1244336, 0, ... 04481 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04482 840 NtContinue (1244336, 0, ... 04483 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04484 840 NtContinue (1244336, 0, ... 04485 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04486 840 NtContinue (1244336, 0, ... 04487 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04488 840 NtContinue (1244336, 0, ... 04489 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04490 840 NtContinue (1244336, 0, ... 04491 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04492 840 NtContinue (1244336, 0, ... 04493 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04494 840 NtContinue (1244336, 0, ... 04495 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04496 840 NtContinue (1244336, 0, ... 04497 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04498 840 NtContinue (1244336, 0, ... 04499 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04500 840 NtContinue (1244336, 0, ... 04501 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04502 840 NtContinue (1244336, 0, ... 04503 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04504 840 NtContinue (1244336, 0, ... 04505 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04506 840 NtContinue (1244336, 0, ... 04507 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04508 840 NtContinue (1244336, 0, ... 04509 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04510 840 NtContinue (1244336, 0, ... 04511 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04512 840 NtContinue (1244336, 0, ... 04513 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04514 840 NtContinue (1244336, 0, ... 04515 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04516 840 NtContinue (1244336, 0, ... 04517 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04518 840 NtContinue (1244336, 0, ... 04519 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04520 840 NtContinue (1244336, 0, ... 04521 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04522 840 NtContinue (1244336, 0, ... 04523 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04524 840 NtContinue (1244336, 0, ... 04525 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04526 840 NtContinue (1244336, 0, ... 04527 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04528 840 NtContinue (1244336, 0, ... 04529 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04530 840 NtContinue (1244336, 0, ... 04531 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04532 840 NtContinue (1244336, 0, ... 04533 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04534 840 NtContinue (1244336, 0, ... 04535 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04536 840 NtContinue (1244336, 0, ... 04537 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04538 840 NtContinue (1244336, 0, ... 04539 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04540 840 NtContinue (1244336, 0, ... 04541 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04542 840 NtContinue (1244336, 0, ... 04543 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04544 840 NtContinue (1244336, 0, ... 04545 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04546 840 NtContinue (1244336, 0, ... 04547 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04548 840 NtContinue (1244336, 0, ... 04549 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04550 840 NtContinue (1244336, 0, ... 04551 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04552 840 NtContinue (1244336, 0, ... 04553 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04554 840 NtContinue (1244336, 0, ... 04555 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04556 840 NtContinue (1244336, 0, ... 04557 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04558 840 NtContinue (1244336, 0, ... 04559 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04560 840 NtContinue (1244336, 0, ... 04561 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04562 840 NtContinue (1244336, 0, ... 04563 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04564 840 NtContinue (1244336, 0, ... 04565 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04566 840 NtContinue (1244336, 0, ... 04567 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04568 840 NtContinue (1244336, 0, ... 04569 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04570 840 NtContinue (1244336, 0, ... 04571 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04572 840 NtContinue (1244336, 0, ... 04573 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04574 840 NtContinue (1244336, 0, ... 04575 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04576 840 NtContinue (1244336, 0, ... 04577 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04578 840 NtContinue (1244336, 0, ... 04579 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04580 840 NtContinue (1244336, 0, ... 04581 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04582 840 NtContinue (1244336, 0, ... 04583 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04584 840 NtContinue (1244336, 0, ... 04585 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04586 840 NtContinue (1244336, 0, ... 04587 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04588 840 NtContinue (1244336, 0, ... 04589 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04590 840 NtContinue (1244336, 0, ... 04591 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04592 840 NtContinue (1244336, 0, ... 04593 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04594 840 NtContinue (1244336, 0, ... 04595 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04596 840 NtContinue (1244336, 0, ... 04597 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04598 840 NtContinue (1244336, 0, ... 04599 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04600 840 NtContinue (1244336, 0, ... 04601 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04602 840 NtContinue (1244336, 0, ... 04603 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04604 840 NtContinue (1244336, 0, ... 04605 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04606 840 NtContinue (1244336, 0, ... 04607 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04608 840 NtContinue (1244336, 0, ... 04609 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04610 840 NtContinue (1244336, 0, ... 04611 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04612 840 NtContinue (1244336, 0, ... 04613 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04614 840 NtContinue (1244336, 0, ... 04615 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04616 840 NtContinue (1244336, 0, ... 04617 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04618 840 NtContinue (1244336, 0, ... 04619 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04620 840 NtContinue (1244336, 0, ... 04621 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04622 840 NtContinue (1244336, 0, ... 04623 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04624 840 NtContinue (1244336, 0, ... 04625 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04626 840 NtContinue (1244336, 0, ... 04627 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04628 840 NtContinue (1244336, 0, ... 04629 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04630 840 NtContinue (1244336, 0, ... 04631 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04632 840 NtContinue (1244336, 0, ... 04633 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04634 840 NtContinue (1244336, 0, ... 04635 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04636 840 NtContinue (1244336, 0, ... 04637 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04638 840 NtContinue (1244336, 0, ... 04639 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04640 840 NtContinue (1244336, 0, ... 04641 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04642 840 NtContinue (1244336, 0, ... 04643 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04644 840 NtContinue (1244336, 0, ... 04645 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04646 840 NtContinue (1244336, 0, ... 04647 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04648 840 NtContinue (1244336, 0, ... 04649 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04650 840 NtContinue (1244336, 0, ... 04651 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04652 840 NtContinue (1244336, 0, ... 04653 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04654 840 NtContinue (1244336, 0, ... 04655 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04656 840 NtContinue (1244336, 0, ... 04657 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04658 840 NtContinue (1244336, 0, ... 04659 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04660 840 NtContinue (1244336, 0, ... 04661 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04662 840 NtContinue (1244336, 0, ... 04663 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04664 840 NtContinue (1244336, 0, ... 04665 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04666 840 NtContinue (1244336, 0, ... 04667 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04668 840 NtContinue (1244336, 0, ... 04669 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04670 840 NtContinue (1244336, 0, ... 04671 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04672 840 NtContinue (1244336, 0, ... 04673 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04674 840 NtContinue (1244336, 0, ... 04675 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04676 840 NtContinue (1244336, 0, ... 04677 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04678 840 NtContinue (1244336, 0, ... 04679 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04680 840 NtContinue (1244336, 0, ... 04681 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04682 840 NtContinue (1244336, 0, ... 04683 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04684 840 NtContinue (1244336, 0, ... 04685 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04686 840 NtContinue (1244336, 0, ... 04687 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04688 840 NtContinue (1244336, 0, ... 04689 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04690 840 NtContinue (1244336, 0, ... 04691 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04692 840 NtContinue (1244336, 0, ... 04693 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04694 840 NtContinue (1244336, 0, ... 04695 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04696 840 NtContinue (1244336, 0, ... 04697 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04698 840 NtContinue (1244336, 0, ... 04699 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04700 840 NtContinue (1244336, 0, ... 04701 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04702 840 NtContinue (1244336, 0, ... 04703 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04704 840 NtContinue (1244336, 0, ... 04705 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04706 840 NtContinue (1244336, 0, ... 04707 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04708 840 NtContinue (1244336, 0, ... 04709 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04710 840 NtContinue (1244336, 0, ... 04711 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04712 840 NtContinue (1244336, 0, ... 04713 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04714 840 NtContinue (1244336, 0, ... 04715 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04716 840 NtContinue (1244336, 0, ... 04717 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04718 840 NtContinue (1244336, 0, ... 04719 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04720 840 NtContinue (1244336, 0, ... 04721 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04722 840 NtContinue (1244336, 0, ... 04723 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04724 840 NtContinue (1244336, 0, ... 04725 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04726 840 NtContinue (1244336, 0, ... 04727 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04728 840 NtContinue (1244336, 0, ... 04729 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04730 840 NtContinue (1244336, 0, ... 04731 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04732 840 NtContinue (1244336, 0, ... 04733 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04734 840 NtContinue (1244336, 0, ... 04735 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04736 840 NtContinue (1244336, 0, ... 04737 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04738 840 NtContinue (1244336, 0, ... 04739 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04740 840 NtContinue (1244336, 0, ... 04741 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04742 840 NtContinue (1244336, 0, ... 04743 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04744 840 NtContinue (1244336, 0, ... 04745 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04746 840 NtContinue (1244336, 0, ... 04747 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04748 840 NtContinue (1244336, 0, ... 04749 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04750 840 NtContinue (1244336, 0, ... 04751 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04752 840 NtContinue (1244336, 0, ... 04753 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04754 840 NtContinue (1244336, 0, ... 04755 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04756 840 NtContinue (1244336, 0, ... 04757 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04758 840 NtContinue (1244336, 0, ... 04759 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04760 840 NtContinue (1244336, 0, ... 04761 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04762 840 NtContinue (1244336, 0, ... 04763 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04764 840 NtContinue (1244336, 0, ... 04765 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04766 840 NtContinue (1244336, 0, ... 04767 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04768 840 NtContinue (1244336, 0, ... 04769 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04770 840 NtContinue (1244336, 0, ... 04771 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04772 840 NtContinue (1244336, 0, ... 04773 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04774 840 NtContinue (1244336, 0, ... 04775 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04776 840 NtContinue (1244336, 0, ... 04777 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04778 840 NtContinue (1244336, 0, ... 04779 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04780 840 NtContinue (1244336, 0, ... 04781 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04782 840 NtContinue (1244336, 0, ... 04783 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04784 840 NtContinue (1244336, 0, ... 04785 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04786 840 NtContinue (1244336, 0, ... 04787 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04788 840 NtContinue (1244336, 0, ... 04789 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04790 840 NtContinue (1244336, 0, ... 04791 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04792 840 NtContinue (1244336, 0, ... 04793 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04794 840 NtContinue (1244336, 0, ... 04795 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04796 840 NtContinue (1244336, 0, ... 04797 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04798 840 NtContinue (1244336, 0, ... 04799 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04800 840 NtContinue (1244336, 0, ... 04801 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04802 840 NtContinue (1244336, 0, ... 04803 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04804 840 NtContinue (1244336, 0, ... 04805 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04806 840 NtContinue (1244336, 0, ... 04807 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04808 840 NtContinue (1244336, 0, ... 04809 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04810 840 NtContinue (1244336, 0, ... 04811 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04812 840 NtContinue (1244336, 0, ... 04813 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04814 840 NtContinue (1244336, 0, ... 04815 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04816 840 NtContinue (1244336, 0, ... 04817 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04818 840 NtContinue (1244336, 0, ... 04819 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04820 840 NtContinue (1244336, 0, ... 04821 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04822 840 NtContinue (1244336, 0, ... 04823 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04824 840 NtContinue (1244336, 0, ... 04825 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04826 840 NtContinue (1244336, 0, ... 04827 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04828 840 NtContinue (1244336, 0, ... 04829 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04830 840 NtContinue (1244336, 0, ... 04831 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04832 840 NtContinue (1244336, 0, ... 04833 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04834 840 NtContinue (1244336, 0, ... 04835 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04836 840 NtContinue (1244336, 0, ... 04837 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04838 840 NtContinue (1244336, 0, ... 04839 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04840 840 NtContinue (1244336, 0, ... 04841 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04842 840 NtContinue (1244336, 0, ... 04843 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04844 840 NtContinue (1244336, 0, ... 04845 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04846 840 NtContinue (1244336, 0, ... 04847 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04848 840 NtContinue (1244336, 0, ... 04849 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04850 840 NtContinue (1244336, 0, ... 04851 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04852 840 NtContinue (1244336, 0, ... 04853 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04854 840 NtContinue (1244336, 0, ... 04855 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04856 840 NtContinue (1244336, 0, ... 04857 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04858 840 NtContinue (1244336, 0, ... 04859 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04860 840 NtContinue (1244336, 0, ... 04861 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04862 840 NtContinue (1244336, 0, ... 04863 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04864 840 NtContinue (1244336, 0, ... 04865 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04866 840 NtContinue (1244336, 0, ... 04867 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04868 840 NtContinue (1244336, 0, ... 04869 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04870 840 NtContinue (1244336, 0, ... 04871 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04872 840 NtContinue (1244336, 0, ... 04873 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04874 840 NtContinue (1244336, 0, ... 04875 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04876 840 NtContinue (1244336, 0, ... 04877 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04878 840 NtContinue (1244336, 0, ... 04879 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04880 840 NtContinue (1244336, 0, ... 04881 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04882 840 NtContinue (1244336, 0, ... 04883 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04884 840 NtContinue (1244336, 0, ... 04885 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04886 840 NtContinue (1244336, 0, ... 04887 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04888 840 NtContinue (1244336, 0, ... 04889 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04890 840 NtContinue (1244336, 0, ... 04891 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04892 840 NtContinue (1244336, 0, ... 04893 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04894 840 NtContinue (1244336, 0, ... 04895 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04896 840 NtContinue (1244336, 0, ... 04897 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04898 840 NtContinue (1244336, 0, ... 04899 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04900 840 NtContinue (1244336, 0, ... 04901 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04902 840 NtContinue (1244336, 0, ... 04903 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04904 840 NtContinue (1244336, 0, ... 04905 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04906 840 NtContinue (1244336, 0, ... 04907 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04908 840 NtContinue (1244336, 0, ... 04909 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04910 840 NtContinue (1244336, 0, ... 04911 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04912 840 NtContinue (1244336, 0, ... 04913 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04914 840 NtContinue (1244336, 0, ... 04915 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04916 840 NtContinue (1244336, 0, ... 04917 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04918 840 NtContinue (1244336, 0, ... 04919 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04920 840 NtContinue (1244336, 0, ... 04921 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04922 840 NtContinue (1244336, 0, ... 04923 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04924 840 NtContinue (1244336, 0, ... 04925 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04926 840 NtContinue (1244336, 0, ... 04927 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04928 840 NtContinue (1244336, 0, ... 04929 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04930 840 NtContinue (1244336, 0, ... 04931 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04932 840 NtContinue (1244336, 0, ... 04933 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04934 840 NtContinue (1244336, 0, ... 04935 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04936 840 NtContinue (1244336, 0, ... 04937 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04938 840 NtContinue (1244336, 0, ... 04939 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04940 840 NtContinue (1244336, 0, ... 04941 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04942 840 NtContinue (1244336, 0, ... 04943 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04944 840 NtContinue (1244336, 0, ... 04945 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04946 840 NtContinue (1244336, 0, ... 04947 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04948 840 NtContinue (1244336, 0, ... 04949 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04950 840 NtContinue (1244336, 0, ... 04951 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04952 840 NtContinue (1244336, 0, ... 04953 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04954 840 NtContinue (1244336, 0, ... 04955 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04956 840 NtContinue (1244336, 0, ... 04957 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04958 840 NtContinue (1244336, 0, ... 04959 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04960 840 NtContinue (1244336, 0, ... 04961 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04962 840 NtContinue (1244336, 0, ... 04963 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04964 840 NtContinue (1244336, 0, ... 04965 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04966 840 NtContinue (1244336, 0, ... 04967 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04968 840 NtContinue (1244336, 0, ... 04969 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04970 840 NtContinue (1244336, 0, ... 04971 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04972 840 NtContinue (1244336, 0, ... 04973 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04974 840 NtContinue (1244336, 0, ... 04975 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04976 840 NtContinue (1244336, 0, ... 04977 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04978 840 NtContinue (1244336, 0, ... 04979 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04980 840 NtContinue (1244336, 0, ... 04981 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04982 840 NtContinue (1244336, 0, ... 04983 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04984 840 NtContinue (1244336, 0, ... 04985 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04986 840 NtContinue (1244336, 0, ... 04987 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04988 840 NtContinue (1244336, 0, ... 04989 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04990 840 NtContinue (1244336, 0, ... 04991 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04992 840 NtContinue (1244336, 0, ... 04993 840 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0