Summary:

NtAddAtom(>) 1 NtQueryInstallUILanguage(>) 1 NtSetInformationObject(>) 2 NtQueryAttributesFile(>) 14
NtCallbackReturn(>) 1 NtQueryObject(>) 1 NtAccessCheck(>) 3 NtOpenFile(>) 20
NtCreateEvent(>) 1 NtQuerySymbolicLinkObject(>) 1 NtGdiCreateCompatibleDC(>) 3 NtOpenSection(>) 20
NtCreateFile(>) 1 NtQueryVolumeInformationFile(>) 1 NtUserRegisterWindowMessage(>) 3 NtQuerySystemInformation(>) 24
NtCreateKey(>) 1 NtRegisterThreadTerminatePort(>) 1 NtQueryDefaultLocale(>) 4 NtQueryValueKey(>) 26
NtCreateSemaphore(>) 1 NtSecureConnectPort(>) 1 NtGdiGetStockObject(>) 5 NtAllocateVirtualMemory(>) 28
NtDuplicateObject(>) 1 NtSetInformationProcess(>) 1 NtOpenProcessToken(>) 5 NtMapViewOfSection(>) 29
NtEnumerateValueKey(>) 1 NtSetInformationThread(>) 1 NtQueryInformationProcess(>) 5 NtUserFindExistingCursorIcon(>) 50
NtFsControlFile(>) 1 NtSetValueKey(>) 1 NtQuerySection(>) 5 NtOpenKey(>) 60
NtGdiCreateBitmap(>) 1 NtTestAlert(>) 1 NtRequestWaitReplyPort(>) 7 NtUserRegisterClassExWOW(>) 61
NtGdiInit(>) 1 NtUserCallNoParam(>) 1 NtOpenProcessTokenEx(>) 8 NtFlushInstructionCache(>) 65
NtGdiQueryFontAssocInfo(>) 1 NtUserCallOneParam(>) 1 NtOpenThreadTokenEx(>) 8 NtClose(>) 87
NtGdiSelectBitmap(>) 1 NtUserGetDC(>) 1 NtQueryDefaultUILanguage(>) 8 NtProtectVirtualMemory(>) 130
NtOpenEvent(>) 1 NtUserGetThreadDesktop(>) 1 NtUnmapViewOfSection(>) 8 NtContinue(>) 2112
NtOpenKeyedEvent(>) 1 NtDeviceIoControlFile(>) 2 NtQueryDebugFilterState(>) 9 NtQueryVirtualMemory(>) 2116
NtOpenProcess(>) 1 NtFreeVirtualMemory(>) 2 NtQueryInformationToken(>) 11
NtOpenSymbolicLinkObject(>) 1 NtGdiCreateSolidBrush(>) 2 NtUserSystemParametersInfo(>) 11
NtQueryInformationFile(>) 1

Trace:

00001 1744 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 1744 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 1744 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 1744 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 1744 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 1744 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 1744 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 1744 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 1744 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 1744 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 1744 NtClose (12, ... ) == 0x0 00015 1744 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 1744 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 1744 NtClose (16, ... ) == 0x0 00021 1744 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 1744 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 1744 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 1744 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 1744 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 1744 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 1744 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 19136512}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 19136512}, {0, 0, 0}, 200, 44, ) == 0x0 00029 1744 NtClose (16, ... ) == 0x0 00030 1744 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 1744 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 1744 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 1744 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 1744 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6$\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ... {28, 56, reply, 0, 1736, 1744, 75469, 0} "\330<\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ) ... {28, 56, reply, 0, 1736, 1744, 75469, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6$\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ... {28, 56, reply, 0, 1736, 1744, 75469, 0} "\330<\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6$\1\4\0\0\0" ) ) == 0x0 00036 1744 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 1744 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 1744 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 1744 NtClose (16, ... ) == 0x0 00041 1744 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 1744 NtClose (16, ... ) == 0x0 00044 1744 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 1744 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 1744 NtClose (16, ... ) == 0x0 00048 1744 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 1744 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 1744 NtClose (16, ... ) == 0x0 00052 1744 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 1744 NtClose (16, ... ) == 0x0 00055 1744 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 1744 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 1744 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 1744 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 1744 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6$\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ... {24, 52, reply, 0, 1736, 1744, 75470, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ) ... {24, 52, reply, 0, 1736, 1744, 75470, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6$\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ... {24, 52, reply, 0, 1736, 1744, 75470, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6$\1p\30\0\0" ) ) == 0x0 00060 1744 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6$\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ... {28, 56, reply, 0, 1736, 1744, 75471, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ) ... {28, 56, reply, 0, 1736, 1744, 75471, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6$\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ... {28, 56, reply, 0, 1736, 1744, 75471, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6$\18\6\0\0" ) ) == 0x0 00061 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 128, ) == 0x0 00062 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 128, ... (0x46d000), 77824, 4, ) == 0x0 00063 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00064 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00065 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00066 1744 NtClose (16, ... ) == 0x0 00067 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00068 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00069 1744 NtClose (16, ... ) == 0x0 00070 1744 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00071 1744 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00072 1744 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00073 1744 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00074 1744 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00075 1744 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00076 1744 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00077 1744 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00078 1744 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00079 1744 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00080 1744 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00081 1744 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00082 1744 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00083 1744 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00084 1744 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00085 1744 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00086 1744 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00087 1744 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00088 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00089 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00090 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00091 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "advapi32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00092 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00093 1744 NtClose (16, ... ) == 0x0 00094 1744 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00095 1744 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00096 1744 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00097 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 16, ) }, ... 16, ) == 0x0 00098 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00099 1744 NtClose (16, ... ) == 0x0 00100 1744 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00101 1744 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00102 1744 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00103 1744 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00104 1744 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00105 1744 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00106 1744 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00107 1744 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00108 1744 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00109 1744 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00110 1744 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00111 1744 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00112 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00113 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00114 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00115 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00116 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00117 1744 NtClose (16, ... ) == 0x0 00118 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00119 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00120 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00121 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00122 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00123 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00124 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00125 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00126 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00127 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 16, ) }, ... 16, ) == 0x0 00128 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00129 1744 NtClose (16, ... ) == 0x0 00130 1744 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00131 1744 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00132 1744 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00133 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00134 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00135 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00136 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00137 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00138 1744 NtClose (16, ... ) == 0x0 00139 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00140 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00141 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00142 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00143 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00144 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00145 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00146 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00147 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00148 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00149 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00150 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00151 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00152 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00153 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00154 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00155 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00156 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00157 1744 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00158 1744 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00159 1744 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00160 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00161 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00162 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00163 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00164 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00165 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00166 1744 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00167 1744 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00168 1744 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00169 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00170 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00171 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00172 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00173 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00174 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00175 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00176 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c9c0000), 0x0, 8482816, ) == 0x0 00177 1744 NtClose (16, ... ) == 0x0 00178 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00179 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00180 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00181 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00182 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00183 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00184 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00185 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00186 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00187 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00188 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00189 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00190 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00191 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00192 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00193 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00194 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00195 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00196 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 16, ) }, ... 16, ) == 0x0 00197 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f60000), 0x0, 483328, ) == 0x0 00198 1744 NtClose (16, ... ) == 0x0 00199 1744 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00200 1744 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00201 1744 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00202 1744 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00203 1744 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00204 1744 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00205 1744 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00206 1744 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00207 1744 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00208 1744 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00209 1744 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00210 1744 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00211 1744 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00212 1744 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00213 1744 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00214 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00215 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00216 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00217 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00218 1744 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00219 1744 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00220 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00221 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00222 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00223 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00224 1744 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00225 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00226 1744 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00227 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == 0x0 00228 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00229 1744 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00230 1744 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00231 1744 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00232 1744 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00233 1744 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00234 1744 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00235 1744 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00236 1744 NtClose (36, ... ) == 0x0 00237 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00238 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00239 1744 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00240 1744 NtClose (36, ... ) == 0x0 00241 1744 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00242 1744 NtClose (32, ... ) == 0x0 00243 1744 NtClose (16, ... ) == 0x0 00244 1744 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 94208, ) == 0x0 00245 1744 NtClose (28, ... ) == 0x0 00246 1744 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00247 1744 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00248 1744 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00249 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00251 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == 0x0 00252 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00253 1744 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00254 1744 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00255 1744 NtClose (28, ... ) == 0x0 00256 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00257 1744 NtClose (16, ... ) == 0x0 00258 1744 NtProtectVirtualMemory (-1, (0x71aa1000), 352, 4, ... (0x71aa1000), 4096, 32, ) == 0x0 00259 1744 NtProtectVirtualMemory (-1, (0x71aa1000), 4096, 32, ... (0x71aa1000), 4096, 4, ) == 0x0 00260 1744 NtFlushInstructionCache (-1, 1906970624, 352, ... ) == 0x0 00261 1744 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00262 1744 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00263 1744 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00264 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00265 1744 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00266 1744 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00267 1744 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00268 1744 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00269 1744 NtOpenProcessToken (-1, 0x8, ... 16, ) == 0x0 00270 1744 NtQueryInformationToken (16, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00271 1744 NtClose (16, ... ) == 0x0 00272 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00273 1744 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00274 1744 NtClose (16, ... ) == 0x0 00275 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00276 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00277 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00278 1744 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6$\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ... {28, 56, reply, 0, 1736, 1744, 75472, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ) ... {28, 56, reply, 0, 1736, 1744, 75472, 0} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6$\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ... {28, 56, reply, 0, 1736, 1744, 75472, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6$\1$\1\0\0" ) ) == 0x0 00279 1744 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 16, ) }, ... 16, ) == 0x0 00280 1744 NtQueryValueKey (16, (16, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00281 1744 NtClose (16, ... ) == 0x0 00282 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00283 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00284 1744 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00285 1744 NtClose (16, ... ) == 0x0 00286 1744 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00287 1744 NtClose (28, ... ) == 0x0 00288 1744 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00289 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00290 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00291 1744 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00292 1744 NtClose (28, ... ) == 0x0 00293 1744 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00294 1744 NtClose (16, ... ) == 0x0 00295 1744 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00296 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00297 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00298 1744 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00299 1744 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00300 1744 NtClose (16, ... ) == 0x0 00301 1744 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00302 1744 NtClose (28, ... ) == 0x0 00303 1744 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00304 1744 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00305 1744 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00306 1744 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00307 1744 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00308 1744 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00309 1744 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00310 1744 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00311 1744 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00312 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00313 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00314 1744 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00315 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00316 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00317 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00318 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00319 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00320 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00322 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00323 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00325 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00326 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00327 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00328 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 28, ) }, ... 28, ) == 0x0 00330 1744 NtQueryValueKey (28, (28, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00331 1744 NtClose (28, ... ) == 0x0 00332 1744 NtMapViewOfSection (-2147481380, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x480000), 0x0, 1060864, ) == 0x0 00333 1744 NtClose (-2147481380, ... ) == 0x0 00334 1744 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 28, ) == 0x0 00335 1744 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00336 1744 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147481380, ) == 0x0 00337 1744 NtQueryInformationToken (-2147481380, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00338 1744 NtQueryInformationToken (-2147481380, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00339 1744 NtClose (-2147481380, ... ) == 0x0 00340 1744 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00341 1744 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00342 1744 NtDuplicateObject (-1, 16, -1, 0x0, 0, 2, ... 36, ) == 0x0 00343 1744 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147481380, ) }, ... -2147481380, ) == 0x0 00344 1744 NtQueryValueKey (-2147481380, (-2147481380, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00345 1744 NtClose (-2147481380, ... ) == 0x0 00346 1744 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147481380, ) }, ... -2147481380, ) == 0x0 00347 1744 NtQueryValueKey (-2147481380, (-2147481380, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00348 1744 NtClose (-2147481380, ... ) == 0x0 00349 1744 NtQueryDefaultLocale (0, -139347636, ... ) == 0x0 00350 1744 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00351 1744 NtUserCallNoParam (24, ... ) == 0x0 00352 1744 NtGdiCreateCompatibleDC (0, ... 00353 1744 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00352 1744 NtGdiCreateCompatibleDC ... ) == 0xf2010663 00354 1744 NtGdiGetStockObject (0, ... ) == 0x1900010 00355 1744 NtGdiGetStockObject (4, ... ) == 0x1900011 00356 1744 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0xfd0505f7 00357 1744 NtGdiCreateSolidBrush (0, 0, ... 00358 1744 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8978432, 4096, ) == 0x0 00357 1744 NtGdiCreateSolidBrush ... ) == 0x4210057d 00359 1744 NtGdiGetStockObject (13, ... ) == 0x18a0021 00360 1744 NtGdiCreateCompatibleDC (0, ... ) == 0x69010363 00361 1744 NtGdiSelectBitmap (1761674083, -50002441, ... ) == 0x185000f 00362 1744 NtUserGetThreadDesktop (1744, 0, ... ) == 0x20 00363 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00364 1744 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00365 1744 NtClose (40, ... ) == 0x0 00366 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00367 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x8173c017 00368 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00369 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x8173c01c 00370 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00371 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x8173c01e 00372 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00373 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x81738002 00374 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00375 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x8173c018 00376 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00377 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x8173c01a 00378 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00379 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x8173c01d 00380 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00381 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x8173c026 00382 1744 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00383 1744 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x8173c019 00384 1744 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8173c020 00385 1744 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8173c022 00386 1744 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8173c023 00387 1744 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8173c024 00388 1744 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8173c025 00389 1744 NtCallbackReturn (0, 0, 0, ... 00390 1744 NtGdiInit (... ) == 0x1 00391 1744 NtGdiGetStockObject (18, ... ) == 0x290001c 00392 1744 NtGdiGetStockObject (19, ... ) == 0x1b00019 00393 1744 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00394 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00395 1744 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00396 1744 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00397 1744 NtClose (40, ... ) == 0x0 00398 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00399 1744 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00400 1744 NtClose (40, ... ) == 0x0 00401 1744 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00402 1744 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00403 1744 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00404 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00405 1744 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9043968, 65536, ) == 0x0 00406 1744 NtAllocateVirtualMemory (-1, 9043968, 0, 4096, 4096, 4, ... 9043968, 4096, ) == 0x0 00407 1744 NtAllocateVirtualMemory (-1, 9048064, 0, 8192, 4096, 4, ... 9048064, 8192, ) == 0x0 00408 1744 NtAllocateVirtualMemory (-1, 9056256, 0, 4096, 4096, 4, ... 9056256, 4096, ) == 0x0 00409 1744 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00410 1744 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8b0000), 0x0, 12288, ) == 0x0 00411 1744 NtClose (44, ... ) == 0x0 00412 1744 NtAllocateVirtualMemory (-1, 9060352, 0, 4096, 4096, 4, ... 9060352, 4096, ) == 0x0 00413 1744 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00414 1744 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00415 1744 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00416 1744 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00417 1744 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00418 1744 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00419 1744 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\264\245\211\276\206:\223\234\334\274\25o\270M!-\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00420 1744 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00421 1744 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00422 1744 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00423 1744 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00424 1744 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00425 1744 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00426 1744 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00427 1744 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147481380, 2, ) }, 0, 0x0, 0, ... -2147481380, 2, ) == 0x0 00428 1744 NtSetValueKey (-2147481380, (-2147481380, "Seed", 0, 3, "\243\235\33\212\31\265?\34K\274\372\247~%\271c\331\276&\276\304\206\272\13\322\373\364\321m8/r\340\3\346\256J\217\222\205]\34e\2675g\316\31\245\233\34\254v\313\220\350\377\336\11, 80, ... ) , 0, 3, (-2147481380, "Seed", 0, 3, "\243\235\33\212\31\265?\34K\274\372\247~%\271c\331\276&\276\304\206\272\13\322\373\364\321m8/r\340\3\346\256J\217\222\205]\34e\2675g\316\31\245\233\34\254v\313\220\350\377\336\11, 80, ... ) , 80, ... ) == 0x0 00429 1744 NtClose (-2147481380, ... ) == 0x0 00419 1744 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "I\5\237\244c\230\31D\341\1\261\346\332\247\204\257\36S0\234\13\374\4\311\24\27\215\36rr\257\202c\304\200\210\207\2445W\313\14\3\26\322\364\344=\331\16\277\263S\370Pg\227M\327\275\213[\234T@\204zA\266\11\35\315,\322y\341\253/H\201\301#\242\230\312\264\313g)Ol\1\14\201\323\232\340\367\322\315\217!\235\264\251\303\301\340j\32?\222R\366\202\223$\210k\273.\221|,\20U\216X\361\356\327\232\357\335\276\307\200R\34\24\276\376\306P3W\251\245\276y\271\247@hl\363\231Y"\330\20\251\17\335\256\22a\264\240\30\311\226\315\267\33\214\23\364\372\16!\325\10\271b\321\201dB(\301\317\242\0\22\257\261\324_'P\375jC\4\221\237\2604\344\322s\335\21\226\35\225\20K\235M:G4\2043\262\357\262'\377\230\265\273\366\301\377\306\301\330;\203\357\363qlF\262\271\3\3501TX\332", ) \330\20\251\17\335\256\22a\264\240\30\311\226\315\267\33\214\23\364\372\16!\325\10\271b\321\201dB(\301\317\242\0\22\257\261\324_'P\375jC\4\221\237\2604\344\322s\335\21\226\35\225\20K\235M:G4\2043\262\357\262'\377\230\265\273\366\301\377\306\301\330;\203\357\363qlF\262\271\3\3501TX\332", ) == 0x0 00430 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00431 1744 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00432 1744 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00433 1744 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00434 1744 NtClose (48, ... ) == 0x0 00435 1744 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00436 1744 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00437 1744 NtClose (48, ... ) == 0x0 00438 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00439 1744 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00440 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00441 1744 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00442 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00443 1744 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00444 1744 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00445 1744 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00446 1744 NtClose (48, ... ) == 0x0 00447 1744 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00448 1744 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00449 1744 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00450 1744 NtClose (48, ... ) == 0x0 00451 1744 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00452 1744 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00453 1744 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00454 1744 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00455 1744 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00456 1744 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00457 1744 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00458 1744 NtCreateSemaphore (0x1f0003, {24, 48, 0x80, 1333696, 0, (0x1f0003, {24, 48, 0x80, 1333696, 0, "shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}"}, 0, 2147483647, ... 52, ) }, 0, 2147483647, ... 52, ) == STATUS_OBJECT_NAME_EXISTS 00459 1744 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0 00460 1744 NtQueryValueKey (56, (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00461 1744 NtClose (56, ... ) == 0x0 00462 1744 NtQueryDefaultUILanguage (1241692, ... 00463 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00464 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481380, ) == 0x0 00465 1744 NtQueryInformationToken (-2147481380, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00466 1744 NtClose (-2147481380, ... ) == 0x0 00467 1744 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481380, ) }, ... -2147481380, ) == 0x0 00468 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x240, 0, 0, (0x80000000, {24, -2147481380, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00469 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x640, 0, 0, (0x80000000, {24, -2147481380, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481388, ) }, ... -2147481388, ) == 0x0 00470 1744 NtQueryValueKey (-2147481388, (-2147481388, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00471 1744 NtClose (-2147481388, ... ) == 0x0 00472 1744 NtClose (-2147481380, ... ) == 0x0 00462 1744 NtQueryDefaultUILanguage ... ) == 0x0 00473 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00474 1744 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0 00475 1744 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 8462336, ) == 0x0 00476 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00477 1744 NtQueryDefaultUILanguage (2090319928, ... 00478 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00479 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481380, ) == 0x0 00480 1744 NtQueryInformationToken (-2147481380, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00481 1744 NtClose (-2147481380, ... ) == 0x0 00482 1744 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481380, ) }, ... -2147481380, ) == 0x0 00483 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x240, 0, 0, (0x80000000, {24, -2147481380, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00484 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x640, 0, 0, (0x80000000, {24, -2147481380, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481388, ) }, ... -2147481388, ) == 0x0 00485 1744 NtQueryValueKey (-2147481388, (-2147481388, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00486 1744 NtClose (-2147481388, ... ) == 0x0 00487 1744 NtClose (-2147481380, ... ) == 0x0 00477 1744 NtQueryDefaultUILanguage ... ) == 0x0 00488 1744 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00489 1744 NtQueryDefaultLocale (1, 1239788, ... ) == 0x0 00490 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00491 1744 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 1744, 75480, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1736, 1744, 75480, 0} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 1744, 75480, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6$\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6$\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ) == 0x0 00492 1744 NtClose (56, ... ) == 0x0 00493 1744 NtClose (60, ... ) == 0x0 00494 1744 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00495 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00496 1744 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00497 1744 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00498 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00499 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00500 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238980, ... ) }, 1238980, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00501 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00502 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00503 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00504 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 1239044, ... ) }, 1239044, ... ) == 0x0 00505 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0 00506 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00507 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00508 1744 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00509 1744 NtClose (56, ... ) == 0x0 00510 1744 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 1056768, ) == 0x0 00511 1744 NtClose (64, ... ) == 0x0 00512 1744 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00513 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00514 1744 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0 00515 1744 NtQuerySection (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00516 1744 NtClose (64, ... ) == 0x0 00517 1744 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 1060864, ) == 0x0 00518 1744 NtClose (56, ... ) == 0x0 00519 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00520 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00521 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00522 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00523 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00524 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00525 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00526 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00527 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00528 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00529 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00530 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00531 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00532 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00533 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00534 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00535 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00536 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00537 1744 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00538 1744 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00539 1744 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00540 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00541 1744 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240524, ... ) , 42, 1240524, ... ) == 0x0 00542 1744 NtQueryDefaultUILanguage (1239208, ... 00543 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00544 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481380, ) == 0x0 00545 1744 NtQueryInformationToken (-2147481380, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00546 1744 NtClose (-2147481380, ... ) == 0x0 00547 1744 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481380, ) }, ... -2147481380, ) == 0x0 00548 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x240, 0, 0, (0x80000000, {24, -2147481380, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00549 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x640, 0, 0, (0x80000000, {24, -2147481380, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481388, ) }, ... -2147481388, ) == 0x0 00550 1744 NtQueryValueKey (-2147481388, (-2147481388, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00551 1744 NtClose (-2147481388, ... ) == 0x0 00552 1744 NtClose (-2147481380, ... ) == 0x0 00542 1744 NtQueryDefaultUILanguage ... ) == 0x0 00553 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238048, ... ) }, 1238048, ... ) == 0x0 00554 1744 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00555 1744 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00556 1744 NtClose (56, ... ) == 0x0 00557 1744 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 4096, ) == 0x0 00558 1744 NtClose (64, ... ) == 0x0 00559 1744 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00560 1744 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237644, ... ) }, 1237644, ... ) == 0x0 00561 1744 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1238388, (0x80100080, {24, 0, 0x40, 0, 1238388, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0 00562 1744 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00563 1744 NtClose (64, ... ) == 0x0 00564 1744 NtMapViewOfSection (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8c0000), {0, 0}, 4096, ) == 0x0 00565 1744 NtClose (56, ... ) == 0x0 00566 1744 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00567 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00568 1744 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0 00569 1744 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 4096, ) == 0x0 00570 1744 NtQueryInformationFile (56, 1238040, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00571 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00572 1744 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 1744, 75491, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1736, 1744, 75491, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 1744, 75491, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6$\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6$\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ) == 0x0 00573 1744 NtClose (56, ... ) == 0x0 00574 1744 NtClose (64, ... ) == 0x0 00575 1744 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00576 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00577 1744 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00578 1744 NtUserSystemParametersInfo (104, 0, 2001084812, 0, ... ) == 0x1 00579 1744 NtUserGetDC (0, ... ) == 0x1010054 00580 1744 NtUserCallOneParam (16842836, 57, ... ) == 0x1 00581 1744 NtUserSystemParametersInfo (38, 4, 2001086940, 0, ... ) == 0x1 00582 1744 NtUserSystemParametersInfo (66, 12, 1240040, 0, ... ) == 0x1 00583 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00584 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 64, ) == 0x0 00585 1744 NtQueryInformationToken (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00586 1744 NtClose (64, ... ) == 0x0 00587 1744 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 64, ) }, ... 64, ) == 0x0 00588 1744 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00589 1744 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00590 1744 NtClose (56, ... ) == 0x0 00591 1744 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0 00592 1744 NtQueryValueKey (56, (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00593 1744 NtClose (56, ... ) == 0x0 00594 1744 NtUserSystemParametersInfo (41, 500, 1240068, 0, ... ) == 0x1 00595 1744 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00596 1744 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00597 1744 NtClose (56, ... ) == 0x0 00598 1744 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0 00599 1744 NtQueryValueKey (56, (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00600 1744 NtClose (56, ... ) == 0x0 00601 1744 NtUserSystemParametersInfo (27, 0, 2001085788, 0, ... ) == 0x1 00602 1744 NtUserSystemParametersInfo (102, 0, 2001086828, 0, ... ) == 0x1 00603 1744 NtClose (64, ... ) == 0x0 00604 1744 NtUserSystemParametersInfo (4130, 0, 1240572, 0, ... ) == 0x1 00605 1744 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 64, ) }, ... 64, ) == 0x0 00606 1744 NtEnumerateValueKey (64, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00607 1744 NtClose (64, ... ) == 0x0 00608 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00609 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c03b 00610 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c03d 00611 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00612 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c03f 00613 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00614 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c041 00615 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00616 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c043 00617 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c045 00618 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00619 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c047 00620 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00621 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c049 00622 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00623 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c04b 00624 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00625 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c04d 00626 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00627 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c04f 00628 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c051 00629 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00630 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c053 00631 1744 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00632 1744 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8173c055 00633 1744 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00634 1744 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8173c057 00635 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00636 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c059 00637 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00638 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c05b 00639 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00640 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c05d 00641 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00642 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c05f 00643 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00644 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c017 00645 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00646 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c019 00647 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00648 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c018 00649 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00650 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c01a 00651 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00652 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c01c 00653 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00654 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c01e 00655 1744 NtUserFindExistingCursorIcon (1239812, 1239828, 1239876, ... ) == 0x10011 00656 1744 NtUserRegisterClassExWOW (1239812, 1239880, 1239896, 1239912, 0, 384, 0, ... ) == 0x8173c01b 00657 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00658 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c068 00659 1744 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00660 1744 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8173c06a 00661 1744 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 64, ) }, ... 64, ) == 0x0 00662 1744 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5d090000), 0x0, 630784, ) == 0x0 00663 1744 NtClose (64, ... ) == 0x0 00664 1744 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00665 1744 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00666 1744 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00667 1744 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00668 1744 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00669 1744 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00670 1744 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00671 1744 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00672 1744 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00673 1744 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00674 1744 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00675 1744 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00676 1744 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00677 1744 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00678 1744 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00679 1744 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00680 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00681 1744 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0 00682 1744 NtAllocateVirtualMemory (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0 00683 1744 NtAllocateVirtualMemory (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0 00684 1744 NtAllocateVirtualMemory (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0 00685 1744 NtAllocateVirtualMemory (-1, 9191424, 0, 4096, 4096, 4, ... 9191424, 4096, ) == 0x0 00686 1744 NtQueryDefaultUILanguage (1239820, ... 00687 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00688 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481380, ) == 0x0 00689 1744 NtQueryInformationToken (-2147481380, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00690 1744 NtClose (-2147481380, ... ) == 0x0 00691 1744 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481380, ) }, ... -2147481380, ) == 0x0 00692 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x240, 0, 0, (0x80000000, {24, -2147481380, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00693 1744 NtOpenKey (0x80000000, {24, -2147481380, 0x640, 0, 0, (0x80000000, {24, -2147481380, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481388, ) }, ... -2147481388, ) == 0x0 00694 1744 NtQueryValueKey (-2147481388, (-2147481388, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00695 1744 NtClose (-2147481388, ... ) == 0x0 00696 1744 NtClose (-2147481380, ... ) == 0x0 00686 1744 NtQueryDefaultUILanguage ... ) == 0x0 00697 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll"}, 1, 96, ... 64, {status=0x0, info=1}, ) }, 1, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00698 1744 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00699 1744 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 618496, ) == 0x0 00700 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00701 1744 NtQueryDefaultLocale (1, 1237916, ... ) == 0x0 00702 1744 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00703 1744 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 1744, 75492, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1736, 1744, 75492, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6$\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1736, 1744, 75492, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6$\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6$\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ) == 0x0 00704 1744 NtClose (64, ... ) == 0x0 00705 1744 NtClose (56, ... ) == 0x0 00706 1744 NtUnmapViewOfSection (-1, 0x8e0000, ... ) == 0x0 00707 1744 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00708 1744 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {1736, 0}, ... 56, ) == 0x0 00709 1744 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00710 1744 NtClose (56, ... ) == 0x0 00711 1744 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00712 1744 NtUserSystemParametersInfo (104, 0, 1561338260, 0, ... ) == 0x1 00713 1744 NtUserSystemParametersInfo (38, 4, 1561337988, 0, ... ) == 0x1 00714 1744 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00715 1744 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00716 1744 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00717 1744 NtClose (56, ... ) == 0x0 00718 1744 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 56, ) }, ... 56, ) == 0x0 00719 1744 NtOpenProcessToken (-1, 0x8, ... 64, ) == 0x0 00720 1744 NtAccessCheck (1332816, 64, 0x1, 1241012, 1241064, 56, 1241044, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00721 1744 NtClose (64, ... ) == 0x0 00722 1744 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00723 1744 NtQueryValueKey (64, (64, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00724 1744 NtClose (64, ... ) == 0x0 00725 1744 NtUserSystemParametersInfo (41, 500, 1241192, 0, ... ) == 0x1 00726 1744 NtUserSystemParametersInfo (102, 0, 1561338280, 0, ... ) == 0x1 00727 1744 NtClose (56, ... ) == 0x0 00728 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00729 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c03b 00730 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c03d 00731 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00732 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c03f 00733 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00734 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c041 00735 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00736 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c043 00737 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c045 00738 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00739 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c047 00740 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00741 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c049 00742 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00743 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c04b 00744 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00745 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c04d 00746 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00747 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c04f 00748 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c051 00749 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00750 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c053 00751 1744 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00752 1744 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8173c055 00753 1744 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00754 1744 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8173c057 00755 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00756 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c059 00757 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10013 00758 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c05b 00759 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00760 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c05d 00761 1744 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00762 1744 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8173c05f 00763 1744 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00764 1744 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00765 1744 NtTestAlert (... ) == 0x0 00766 1744 NtContinue (1244464, 1, ... 00767 1744 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x411709,}, 4, ... ) == 0x0 00768 1744 NtQueryVirtualMemory (-1, 0x47d625, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00769 1744 NtContinue (1244336, 0, ... 00770 1744 NtAllocateVirtualMemory (-1, 0, 0, 122368, 4096, 4, ... 9306112, 122880, ) == 0x0 00771 1744 NtQueryVirtualMemory (-1, 0x47d8a0, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00772 1744 NtContinue (1244320, 0, ... 00773 1744 NtAllocateVirtualMemory (-1, 0, 0, 147456, 4096, 4, ... 9437184, 147456, ) == 0x0 00774 1744 NtQueryVirtualMemory (-1, 0x47d9ca, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00775 1744 NtContinue (1244320, 0, ... 00776 1744 NtQueryVirtualMemory (-1, 0x47dabd, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00777 1744 NtContinue (1244328, 0, ... 00778 1744 NtQueryVirtualMemory (-1, 0x47dba9, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00779 1744 NtContinue (1244316, 0, ... 00780 1744 NtQueryVirtualMemory (-1, 0x47dccd, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00781 1744 NtContinue (1244328, 0, ... 00782 1744 NtQueryVirtualMemory (-1, 0x47dde5, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00783 1744 NtContinue (1244336, 0, ... 00784 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00785 1744 NtContinue (1244328, 0, ... 00786 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00787 1744 NtContinue (1244328, 0, ... 00788 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00789 1744 NtContinue (1244328, 0, ... 00790 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00791 1744 NtContinue (1244328, 0, ... 00792 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00793 1744 NtContinue (1244328, 0, ... 00794 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00795 1744 NtContinue (1244328, 0, ... 00796 1744 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00797 1744 NtContinue (1244328, 0, ... 00798 1744 NtFreeVirtualMemory (-1, (0x8e0000), 122368, 16384, ... (0x8e0000), 122880, ) == 0x0 00799 1744 NtQueryVirtualMemory (-1, 0x47e2b8, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00800 1744 NtContinue (1244336, 0, ... 00801 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00802 1744 NtContinue (1244336, 0, ... 00803 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00804 1744 NtContinue (1244336, 0, ... 00805 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00806 1744 NtContinue (1244336, 0, ... 00807 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00808 1744 NtContinue (1244336, 0, ... 00809 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00810 1744 NtContinue (1244336, 0, ... 00811 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00812 1744 NtContinue (1244336, 0, ... 00813 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00814 1744 NtContinue (1244336, 0, ... 00815 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00816 1744 NtContinue (1244336, 0, ... 00817 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00818 1744 NtContinue (1244336, 0, ... 00819 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00820 1744 NtContinue (1244336, 0, ... 00821 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00822 1744 NtContinue (1244336, 0, ... 00823 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00824 1744 NtContinue (1244336, 0, ... 00825 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00826 1744 NtContinue (1244336, 0, ... 00827 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00828 1744 NtContinue (1244336, 0, ... 00829 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00830 1744 NtContinue (1244336, 0, ... 00831 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00832 1744 NtContinue (1244336, 0, ... 00833 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00834 1744 NtContinue (1244336, 0, ... 00835 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00836 1744 NtContinue (1244336, 0, ... 00837 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00838 1744 NtContinue (1244336, 0, ... 00839 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00840 1744 NtContinue (1244336, 0, ... 00841 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00842 1744 NtContinue (1244336, 0, ... 00843 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00844 1744 NtContinue (1244336, 0, ... 00845 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00846 1744 NtContinue (1244336, 0, ... 00847 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00848 1744 NtContinue (1244336, 0, ... 00849 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00850 1744 NtContinue (1244336, 0, ... 00851 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00852 1744 NtContinue (1244336, 0, ... 00853 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00854 1744 NtContinue (1244336, 0, ... 00855 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00856 1744 NtContinue (1244336, 0, ... 00857 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00858 1744 NtContinue (1244336, 0, ... 00859 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00860 1744 NtContinue (1244336, 0, ... 00861 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00862 1744 NtContinue (1244336, 0, ... 00863 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00864 1744 NtContinue (1244336, 0, ... 00865 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00866 1744 NtContinue (1244336, 0, ... 00867 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00868 1744 NtContinue (1244336, 0, ... 00869 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00870 1744 NtContinue (1244336, 0, ... 00871 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00872 1744 NtContinue (1244336, 0, ... 00873 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00874 1744 NtContinue (1244336, 0, ... 00875 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00876 1744 NtContinue (1244336, 0, ... 00877 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00878 1744 NtContinue (1244336, 0, ... 00879 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00880 1744 NtContinue (1244336, 0, ... 00881 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00882 1744 NtContinue (1244336, 0, ... 00883 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00884 1744 NtContinue (1244336, 0, ... 00885 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00886 1744 NtContinue (1244336, 0, ... 00887 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00888 1744 NtContinue (1244336, 0, ... 00889 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00890 1744 NtContinue (1244336, 0, ... 00891 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00892 1744 NtContinue (1244336, 0, ... 00893 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00894 1744 NtContinue (1244336, 0, ... 00895 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00896 1744 NtContinue (1244336, 0, ... 00897 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00898 1744 NtContinue (1244336, 0, ... 00899 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00900 1744 NtContinue (1244336, 0, ... 00901 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00902 1744 NtContinue (1244336, 0, ... 00903 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00904 1744 NtContinue (1244336, 0, ... 00905 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00906 1744 NtContinue (1244336, 0, ... 00907 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00908 1744 NtContinue (1244336, 0, ... 00909 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00910 1744 NtContinue (1244336, 0, ... 00911 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00912 1744 NtContinue (1244336, 0, ... 00913 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00914 1744 NtContinue (1244336, 0, ... 00915 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00916 1744 NtContinue (1244336, 0, ... 00917 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00918 1744 NtContinue (1244336, 0, ... 00919 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00920 1744 NtContinue (1244336, 0, ... 00921 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00922 1744 NtContinue (1244336, 0, ... 00923 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00924 1744 NtContinue (1244336, 0, ... 00925 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00926 1744 NtContinue (1244336, 0, ... 00927 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00928 1744 NtContinue (1244336, 0, ... 00929 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00930 1744 NtContinue (1244336, 0, ... 00931 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00932 1744 NtContinue (1244336, 0, ... 00933 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00934 1744 NtContinue (1244336, 0, ... 00935 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00936 1744 NtContinue (1244336, 0, ... 00937 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00938 1744 NtContinue (1244336, 0, ... 00939 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00940 1744 NtContinue (1244336, 0, ... 00941 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00942 1744 NtContinue (1244336, 0, ... 00943 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00944 1744 NtContinue (1244336, 0, ... 00945 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00946 1744 NtContinue (1244336, 0, ... 00947 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00948 1744 NtContinue (1244336, 0, ... 00949 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00950 1744 NtContinue (1244336, 0, ... 00951 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00952 1744 NtContinue (1244336, 0, ... 00953 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00954 1744 NtContinue (1244336, 0, ... 00955 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00956 1744 NtContinue (1244336, 0, ... 00957 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00958 1744 NtContinue (1244336, 0, ... 00959 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00960 1744 NtContinue (1244336, 0, ... 00961 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00962 1744 NtContinue (1244336, 0, ... 00963 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00964 1744 NtContinue (1244336, 0, ... 00965 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00966 1744 NtContinue (1244336, 0, ... 00967 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00968 1744 NtContinue (1244336, 0, ... 00969 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00970 1744 NtContinue (1244336, 0, ... 00971 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00972 1744 NtContinue (1244336, 0, ... 00973 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00974 1744 NtContinue (1244336, 0, ... 00975 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00976 1744 NtContinue (1244336, 0, ... 00977 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00978 1744 NtContinue (1244336, 0, ... 00979 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00980 1744 NtContinue (1244336, 0, ... 00981 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00982 1744 NtContinue (1244336, 0, ... 00983 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00984 1744 NtContinue (1244336, 0, ... 00985 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00986 1744 NtContinue (1244336, 0, ... 00987 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00988 1744 NtContinue (1244336, 0, ... 00989 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00990 1744 NtContinue (1244336, 0, ... 00991 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00992 1744 NtContinue (1244336, 0, ... 00993 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00994 1744 NtContinue (1244336, 0, ... 00995 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00996 1744 NtContinue (1244336, 0, ... 00997 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00998 1744 NtContinue (1244336, 0, ... 00999 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01000 1744 NtContinue (1244336, 0, ... 01001 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01002 1744 NtContinue (1244336, 0, ... 01003 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01004 1744 NtContinue (1244336, 0, ... 01005 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01006 1744 NtContinue (1244336, 0, ... 01007 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01008 1744 NtContinue (1244336, 0, ... 01009 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01010 1744 NtContinue (1244336, 0, ... 01011 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01012 1744 NtContinue (1244336, 0, ... 01013 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01014 1744 NtContinue (1244336, 0, ... 01015 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01016 1744 NtContinue (1244336, 0, ... 01017 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01018 1744 NtContinue (1244336, 0, ... 01019 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01020 1744 NtContinue (1244336, 0, ... 01021 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01022 1744 NtContinue (1244336, 0, ... 01023 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01024 1744 NtContinue (1244336, 0, ... 01025 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01026 1744 NtContinue (1244336, 0, ... 01027 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01028 1744 NtContinue (1244336, 0, ... 01029 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01030 1744 NtContinue (1244336, 0, ... 01031 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01032 1744 NtContinue (1244336, 0, ... 01033 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01034 1744 NtContinue (1244336, 0, ... 01035 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01036 1744 NtContinue (1244336, 0, ... 01037 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01038 1744 NtContinue (1244336, 0, ... 01039 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01040 1744 NtContinue (1244336, 0, ... 01041 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01042 1744 NtContinue (1244336, 0, ... 01043 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01044 1744 NtContinue (1244336, 0, ... 01045 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01046 1744 NtContinue (1244336, 0, ... 01047 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01048 1744 NtContinue (1244336, 0, ... 01049 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01050 1744 NtContinue (1244336, 0, ... 01051 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01052 1744 NtContinue (1244336, 0, ... 01053 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01054 1744 NtContinue (1244336, 0, ... 01055 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01056 1744 NtContinue (1244336, 0, ... 01057 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01058 1744 NtContinue (1244336, 0, ... 01059 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01060 1744 NtContinue (1244336, 0, ... 01061 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01062 1744 NtContinue (1244336, 0, ... 01063 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01064 1744 NtContinue (1244336, 0, ... 01065 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01066 1744 NtContinue (1244336, 0, ... 01067 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01068 1744 NtContinue (1244336, 0, ... 01069 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01070 1744 NtContinue (1244336, 0, ... 01071 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01072 1744 NtContinue (1244336, 0, ... 01073 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01074 1744 NtContinue (1244336, 0, ... 01075 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01076 1744 NtContinue (1244336, 0, ... 01077 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01078 1744 NtContinue (1244336, 0, ... 01079 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01080 1744 NtContinue (1244336, 0, ... 01081 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01082 1744 NtContinue (1244336, 0, ... 01083 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01084 1744 NtContinue (1244336, 0, ... 01085 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01086 1744 NtContinue (1244336, 0, ... 01087 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01088 1744 NtContinue (1244336, 0, ... 01089 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01090 1744 NtContinue (1244336, 0, ... 01091 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01092 1744 NtContinue (1244336, 0, ... 01093 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01094 1744 NtContinue (1244336, 0, ... 01095 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01096 1744 NtContinue (1244336, 0, ... 01097 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01098 1744 NtContinue (1244336, 0, ... 01099 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01100 1744 NtContinue (1244336, 0, ... 01101 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01102 1744 NtContinue (1244336, 0, ... 01103 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01104 1744 NtContinue (1244336, 0, ... 01105 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01106 1744 NtContinue (1244336, 0, ... 01107 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01108 1744 NtContinue (1244336, 0, ... 01109 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01110 1744 NtContinue (1244336, 0, ... 01111 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01112 1744 NtContinue (1244336, 0, ... 01113 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01114 1744 NtContinue (1244336, 0, ... 01115 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01116 1744 NtContinue (1244336, 0, ... 01117 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01118 1744 NtContinue (1244336, 0, ... 01119 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01120 1744 NtContinue (1244336, 0, ... 01121 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01122 1744 NtContinue (1244336, 0, ... 01123 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01124 1744 NtContinue (1244336, 0, ... 01125 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01126 1744 NtContinue (1244336, 0, ... 01127 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01128 1744 NtContinue (1244336, 0, ... 01129 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01130 1744 NtContinue (1244336, 0, ... 01131 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01132 1744 NtContinue (1244336, 0, ... 01133 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01134 1744 NtContinue (1244336, 0, ... 01135 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01136 1744 NtContinue (1244336, 0, ... 01137 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01138 1744 NtContinue (1244336, 0, ... 01139 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01140 1744 NtContinue (1244336, 0, ... 01141 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01142 1744 NtContinue (1244336, 0, ... 01143 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01144 1744 NtContinue (1244336, 0, ... 01145 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01146 1744 NtContinue (1244336, 0, ... 01147 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01148 1744 NtContinue (1244336, 0, ... 01149 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01150 1744 NtContinue (1244336, 0, ... 01151 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01152 1744 NtContinue (1244336, 0, ... 01153 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01154 1744 NtContinue (1244336, 0, ... 01155 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01156 1744 NtContinue (1244336, 0, ... 01157 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01158 1744 NtContinue (1244336, 0, ... 01159 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01160 1744 NtContinue (1244336, 0, ... 01161 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01162 1744 NtContinue (1244336, 0, ... 01163 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01164 1744 NtContinue (1244336, 0, ... 01165 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01166 1744 NtContinue (1244336, 0, ... 01167 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01168 1744 NtContinue (1244336, 0, ... 01169 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01170 1744 NtContinue (1244336, 0, ... 01171 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01172 1744 NtContinue (1244336, 0, ... 01173 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01174 1744 NtContinue (1244336, 0, ... 01175 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01176 1744 NtContinue (1244336, 0, ... 01177 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01178 1744 NtContinue (1244336, 0, ... 01179 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01180 1744 NtContinue (1244336, 0, ... 01181 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01182 1744 NtContinue (1244336, 0, ... 01183 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01184 1744 NtContinue (1244336, 0, ... 01185 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01186 1744 NtContinue (1244336, 0, ... 01187 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01188 1744 NtContinue (1244336, 0, ... 01189 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01190 1744 NtContinue (1244336, 0, ... 01191 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01192 1744 NtContinue (1244336, 0, ... 01193 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01194 1744 NtContinue (1244336, 0, ... 01195 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01196 1744 NtContinue (1244336, 0, ... 01197 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01198 1744 NtContinue (1244336, 0, ... 01199 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01200 1744 NtContinue (1244336, 0, ... 01201 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01202 1744 NtContinue (1244336, 0, ... 01203 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01204 1744 NtContinue (1244336, 0, ... 01205 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01206 1744 NtContinue (1244336, 0, ... 01207 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01208 1744 NtContinue (1244336, 0, ... 01209 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01210 1744 NtContinue (1244336, 0, ... 01211 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01212 1744 NtContinue (1244336, 0, ... 01213 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01214 1744 NtContinue (1244336, 0, ... 01215 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01216 1744 NtContinue (1244336, 0, ... 01217 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01218 1744 NtContinue (1244336, 0, ... 01219 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01220 1744 NtContinue (1244336, 0, ... 01221 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01222 1744 NtContinue (1244336, 0, ... 01223 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01224 1744 NtContinue (1244336, 0, ... 01225 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01226 1744 NtContinue (1244336, 0, ... 01227 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01228 1744 NtContinue (1244336, 0, ... 01229 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01230 1744 NtContinue (1244336, 0, ... 01231 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01232 1744 NtContinue (1244336, 0, ... 01233 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01234 1744 NtContinue (1244336, 0, ... 01235 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01236 1744 NtContinue (1244336, 0, ... 01237 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01238 1744 NtContinue (1244336, 0, ... 01239 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01240 1744 NtContinue (1244336, 0, ... 01241 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01242 1744 NtContinue (1244336, 0, ... 01243 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01244 1744 NtContinue (1244336, 0, ... 01245 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01246 1744 NtContinue (1244336, 0, ... 01247 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01248 1744 NtContinue (1244336, 0, ... 01249 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01250 1744 NtContinue (1244336, 0, ... 01251 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01252 1744 NtContinue (1244336, 0, ... 01253 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01254 1744 NtContinue (1244336, 0, ... 01255 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01256 1744 NtContinue (1244336, 0, ... 01257 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01258 1744 NtContinue (1244336, 0, ... 01259 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01260 1744 NtContinue (1244336, 0, ... 01261 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01262 1744 NtContinue (1244336, 0, ... 01263 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01264 1744 NtContinue (1244336, 0, ... 01265 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01266 1744 NtContinue (1244336, 0, ... 01267 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01268 1744 NtContinue (1244336, 0, ... 01269 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01270 1744 NtContinue (1244336, 0, ... 01271 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01272 1744 NtContinue (1244336, 0, ... 01273 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01274 1744 NtContinue (1244336, 0, ... 01275 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01276 1744 NtContinue (1244336, 0, ... 01277 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01278 1744 NtContinue (1244336, 0, ... 01279 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01280 1744 NtContinue (1244336, 0, ... 01281 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01282 1744 NtContinue (1244336, 0, ... 01283 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01284 1744 NtContinue (1244336, 0, ... 01285 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01286 1744 NtContinue (1244336, 0, ... 01287 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01288 1744 NtContinue (1244336, 0, ... 01289 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01290 1744 NtContinue (1244336, 0, ... 01291 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01292 1744 NtContinue (1244336, 0, ... 01293 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01294 1744 NtContinue (1244336, 0, ... 01295 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01296 1744 NtContinue (1244336, 0, ... 01297 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01298 1744 NtContinue (1244336, 0, ... 01299 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01300 1744 NtContinue (1244336, 0, ... 01301 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01302 1744 NtContinue (1244336, 0, ... 01303 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01304 1744 NtContinue (1244336, 0, ... 01305 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01306 1744 NtContinue (1244336, 0, ... 01307 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01308 1744 NtContinue (1244336, 0, ... 01309 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01310 1744 NtContinue (1244336, 0, ... 01311 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01312 1744 NtContinue (1244336, 0, ... 01313 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01314 1744 NtContinue (1244336, 0, ... 01315 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01316 1744 NtContinue (1244336, 0, ... 01317 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01318 1744 NtContinue (1244336, 0, ... 01319 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01320 1744 NtContinue (1244336, 0, ... 01321 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01322 1744 NtContinue (1244336, 0, ... 01323 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01324 1744 NtContinue (1244336, 0, ... 01325 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01326 1744 NtContinue (1244336, 0, ... 01327 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01328 1744 NtContinue (1244336, 0, ... 01329 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01330 1744 NtContinue (1244336, 0, ... 01331 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01332 1744 NtContinue (1244336, 0, ... 01333 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01334 1744 NtContinue (1244336, 0, ... 01335 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01336 1744 NtContinue (1244336, 0, ... 01337 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01338 1744 NtContinue (1244336, 0, ... 01339 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01340 1744 NtContinue (1244336, 0, ... 01341 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01342 1744 NtContinue (1244336, 0, ... 01343 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01344 1744 NtContinue (1244336, 0, ... 01345 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01346 1744 NtContinue (1244336, 0, ... 01347 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01348 1744 NtContinue (1244336, 0, ... 01349 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01350 1744 NtContinue (1244336, 0, ... 01351 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01352 1744 NtContinue (1244336, 0, ... 01353 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01354 1744 NtContinue (1244336, 0, ... 01355 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01356 1744 NtContinue (1244336, 0, ... 01357 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01358 1744 NtContinue (1244336, 0, ... 01359 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01360 1744 NtContinue (1244336, 0, ... 01361 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01362 1744 NtContinue (1244336, 0, ... 01363 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01364 1744 NtContinue (1244336, 0, ... 01365 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01366 1744 NtContinue (1244336, 0, ... 01367 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01368 1744 NtContinue (1244336, 0, ... 01369 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01370 1744 NtContinue (1244336, 0, ... 01371 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01372 1744 NtContinue (1244336, 0, ... 01373 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01374 1744 NtContinue (1244336, 0, ... 01375 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01376 1744 NtContinue (1244336, 0, ... 01377 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01378 1744 NtContinue (1244336, 0, ... 01379 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01380 1744 NtContinue (1244336, 0, ... 01381 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01382 1744 NtContinue (1244336, 0, ... 01383 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01384 1744 NtContinue (1244336, 0, ... 01385 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01386 1744 NtContinue (1244336, 0, ... 01387 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01388 1744 NtContinue (1244336, 0, ... 01389 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01390 1744 NtContinue (1244336, 0, ... 01391 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01392 1744 NtContinue (1244336, 0, ... 01393 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01394 1744 NtContinue (1244336, 0, ... 01395 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01396 1744 NtContinue (1244336, 0, ... 01397 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01398 1744 NtContinue (1244336, 0, ... 01399 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01400 1744 NtContinue (1244336, 0, ... 01401 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01402 1744 NtContinue (1244336, 0, ... 01403 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01404 1744 NtContinue (1244336, 0, ... 01405 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01406 1744 NtContinue (1244336, 0, ... 01407 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01408 1744 NtContinue (1244336, 0, ... 01409 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01410 1744 NtContinue (1244336, 0, ... 01411 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01412 1744 NtContinue (1244336, 0, ... 01413 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01414 1744 NtContinue (1244336, 0, ... 01415 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01416 1744 NtContinue (1244336, 0, ... 01417 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01418 1744 NtContinue (1244336, 0, ... 01419 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01420 1744 NtContinue (1244336, 0, ... 01421 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01422 1744 NtContinue (1244336, 0, ... 01423 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01424 1744 NtContinue (1244336, 0, ... 01425 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01426 1744 NtContinue (1244336, 0, ... 01427 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01428 1744 NtContinue (1244336, 0, ... 01429 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01430 1744 NtContinue (1244336, 0, ... 01431 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01432 1744 NtContinue (1244336, 0, ... 01433 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01434 1744 NtContinue (1244336, 0, ... 01435 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01436 1744 NtContinue (1244336, 0, ... 01437 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01438 1744 NtContinue (1244336, 0, ... 01439 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01440 1744 NtContinue (1244336, 0, ... 01441 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01442 1744 NtContinue (1244336, 0, ... 01443 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01444 1744 NtContinue (1244336, 0, ... 01445 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01446 1744 NtContinue (1244336, 0, ... 01447 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01448 1744 NtContinue (1244336, 0, ... 01449 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01450 1744 NtContinue (1244336, 0, ... 01451 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01452 1744 NtContinue (1244336, 0, ... 01453 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01454 1744 NtContinue (1244336, 0, ... 01455 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01456 1744 NtContinue (1244336, 0, ... 01457 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01458 1744 NtContinue (1244336, 0, ... 01459 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01460 1744 NtContinue (1244336, 0, ... 01461 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01462 1744 NtContinue (1244336, 0, ... 01463 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01464 1744 NtContinue (1244336, 0, ... 01465 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01466 1744 NtContinue (1244336, 0, ... 01467 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01468 1744 NtContinue (1244336, 0, ... 01469 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01470 1744 NtContinue (1244336, 0, ... 01471 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01472 1744 NtContinue (1244336, 0, ... 01473 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01474 1744 NtContinue (1244336, 0, ... 01475 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01476 1744 NtContinue (1244336, 0, ... 01477 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01478 1744 NtContinue (1244336, 0, ... 01479 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01480 1744 NtContinue (1244336, 0, ... 01481 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01482 1744 NtContinue (1244336, 0, ... 01483 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01484 1744 NtContinue (1244336, 0, ... 01485 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01486 1744 NtContinue (1244336, 0, ... 01487 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01488 1744 NtContinue (1244336, 0, ... 01489 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01490 1744 NtContinue (1244336, 0, ... 01491 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01492 1744 NtContinue (1244336, 0, ... 01493 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01494 1744 NtContinue (1244336, 0, ... 01495 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01496 1744 NtContinue (1244336, 0, ... 01497 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01498 1744 NtContinue (1244336, 0, ... 01499 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01500 1744 NtContinue (1244336, 0, ... 01501 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01502 1744 NtContinue (1244336, 0, ... 01503 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01504 1744 NtContinue (1244336, 0, ... 01505 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01506 1744 NtContinue (1244336, 0, ... 01507 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01508 1744 NtContinue (1244336, 0, ... 01509 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01510 1744 NtContinue (1244336, 0, ... 01511 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01512 1744 NtContinue (1244336, 0, ... 01513 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01514 1744 NtContinue (1244336, 0, ... 01515 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01516 1744 NtContinue (1244336, 0, ... 01517 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01518 1744 NtContinue (1244336, 0, ... 01519 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01520 1744 NtContinue (1244336, 0, ... 01521 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01522 1744 NtContinue (1244336, 0, ... 01523 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01524 1744 NtContinue (1244336, 0, ... 01525 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01526 1744 NtContinue (1244336, 0, ... 01527 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01528 1744 NtContinue (1244336, 0, ... 01529 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01530 1744 NtContinue (1244336, 0, ... 01531 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01532 1744 NtContinue (1244336, 0, ... 01533 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01534 1744 NtContinue (1244336, 0, ... 01535 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01536 1744 NtContinue (1244336, 0, ... 01537 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01538 1744 NtContinue (1244336, 0, ... 01539 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01540 1744 NtContinue (1244336, 0, ... 01541 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01542 1744 NtContinue (1244336, 0, ... 01543 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01544 1744 NtContinue (1244336, 0, ... 01545 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01546 1744 NtContinue (1244336, 0, ... 01547 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01548 1744 NtContinue (1244336, 0, ... 01549 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01550 1744 NtContinue (1244336, 0, ... 01551 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01552 1744 NtContinue (1244336, 0, ... 01553 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01554 1744 NtContinue (1244336, 0, ... 01555 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01556 1744 NtContinue (1244336, 0, ... 01557 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01558 1744 NtContinue (1244336, 0, ... 01559 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01560 1744 NtContinue (1244336, 0, ... 01561 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01562 1744 NtContinue (1244336, 0, ... 01563 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01564 1744 NtContinue (1244336, 0, ... 01565 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01566 1744 NtContinue (1244336, 0, ... 01567 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01568 1744 NtContinue (1244336, 0, ... 01569 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01570 1744 NtContinue (1244336, 0, ... 01571 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01572 1744 NtContinue (1244336, 0, ... 01573 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01574 1744 NtContinue (1244336, 0, ... 01575 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01576 1744 NtContinue (1244336, 0, ... 01577 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01578 1744 NtContinue (1244336, 0, ... 01579 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01580 1744 NtContinue (1244336, 0, ... 01581 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01582 1744 NtContinue (1244336, 0, ... 01583 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01584 1744 NtContinue (1244336, 0, ... 01585 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01586 1744 NtContinue (1244336, 0, ... 01587 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01588 1744 NtContinue (1244336, 0, ... 01589 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01590 1744 NtContinue (1244336, 0, ... 01591 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01592 1744 NtContinue (1244336, 0, ... 01593 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01594 1744 NtContinue (1244336, 0, ... 01595 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01596 1744 NtContinue (1244336, 0, ... 01597 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01598 1744 NtContinue (1244336, 0, ... 01599 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01600 1744 NtContinue (1244336, 0, ... 01601 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01602 1744 NtContinue (1244336, 0, ... 01603 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01604 1744 NtContinue (1244336, 0, ... 01605 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01606 1744 NtContinue (1244336, 0, ... 01607 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01608 1744 NtContinue (1244336, 0, ... 01609 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01610 1744 NtContinue (1244336, 0, ... 01611 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01612 1744 NtContinue (1244336, 0, ... 01613 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01614 1744 NtContinue (1244336, 0, ... 01615 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01616 1744 NtContinue (1244336, 0, ... 01617 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01618 1744 NtContinue (1244336, 0, ... 01619 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01620 1744 NtContinue (1244336, 0, ... 01621 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01622 1744 NtContinue (1244336, 0, ... 01623 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01624 1744 NtContinue (1244336, 0, ... 01625 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01626 1744 NtContinue (1244336, 0, ... 01627 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01628 1744 NtContinue (1244336, 0, ... 01629 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01630 1744 NtContinue (1244336, 0, ... 01631 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01632 1744 NtContinue (1244336, 0, ... 01633 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01634 1744 NtContinue (1244336, 0, ... 01635 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01636 1744 NtContinue (1244336, 0, ... 01637 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01638 1744 NtContinue (1244336, 0, ... 01639 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01640 1744 NtContinue (1244336, 0, ... 01641 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01642 1744 NtContinue (1244336, 0, ... 01643 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01644 1744 NtContinue (1244336, 0, ... 01645 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01646 1744 NtContinue (1244336, 0, ... 01647 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01648 1744 NtContinue (1244336, 0, ... 01649 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01650 1744 NtContinue (1244336, 0, ... 01651 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01652 1744 NtContinue (1244336, 0, ... 01653 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01654 1744 NtContinue (1244336, 0, ... 01655 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01656 1744 NtContinue (1244336, 0, ... 01657 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01658 1744 NtContinue (1244336, 0, ... 01659 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01660 1744 NtContinue (1244336, 0, ... 01661 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01662 1744 NtContinue (1244336, 0, ... 01663 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01664 1744 NtContinue (1244336, 0, ... 01665 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01666 1744 NtContinue (1244336, 0, ... 01667 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01668 1744 NtContinue (1244336, 0, ... 01669 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01670 1744 NtContinue (1244336, 0, ... 01671 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01672 1744 NtContinue (1244336, 0, ... 01673 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01674 1744 NtContinue (1244336, 0, ... 01675 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01676 1744 NtContinue (1244336, 0, ... 01677 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01678 1744 NtContinue (1244336, 0, ... 01679 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01680 1744 NtContinue (1244336, 0, ... 01681 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01682 1744 NtContinue (1244336, 0, ... 01683 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01684 1744 NtContinue (1244336, 0, ... 01685 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01686 1744 NtContinue (1244336, 0, ... 01687 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01688 1744 NtContinue (1244336, 0, ... 01689 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01690 1744 NtContinue (1244336, 0, ... 01691 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01692 1744 NtContinue (1244336, 0, ... 01693 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01694 1744 NtContinue (1244336, 0, ... 01695 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01696 1744 NtContinue (1244336, 0, ... 01697 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01698 1744 NtContinue (1244336, 0, ... 01699 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01700 1744 NtContinue (1244336, 0, ... 01701 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01702 1744 NtContinue (1244336, 0, ... 01703 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01704 1744 NtContinue (1244336, 0, ... 01705 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01706 1744 NtContinue (1244336, 0, ... 01707 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01708 1744 NtContinue (1244336, 0, ... 01709 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01710 1744 NtContinue (1244336, 0, ... 01711 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01712 1744 NtContinue (1244336, 0, ... 01713 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01714 1744 NtContinue (1244336, 0, ... 01715 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01716 1744 NtContinue (1244336, 0, ... 01717 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01718 1744 NtContinue (1244336, 0, ... 01719 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01720 1744 NtContinue (1244336, 0, ... 01721 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01722 1744 NtContinue (1244336, 0, ... 01723 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01724 1744 NtContinue (1244336, 0, ... 01725 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01726 1744 NtContinue (1244336, 0, ... 01727 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01728 1744 NtContinue (1244336, 0, ... 01729 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01730 1744 NtContinue (1244336, 0, ... 01731 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01732 1744 NtContinue (1244336, 0, ... 01733 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01734 1744 NtContinue (1244336, 0, ... 01735 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01736 1744 NtContinue (1244336, 0, ... 01737 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01738 1744 NtContinue (1244336, 0, ... 01739 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01740 1744 NtContinue (1244336, 0, ... 01741 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01742 1744 NtContinue (1244336, 0, ... 01743 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01744 1744 NtContinue (1244336, 0, ... 01745 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01746 1744 NtContinue (1244336, 0, ... 01747 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01748 1744 NtContinue (1244336, 0, ... 01749 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01750 1744 NtContinue (1244336, 0, ... 01751 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01752 1744 NtContinue (1244336, 0, ... 01753 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01754 1744 NtContinue (1244336, 0, ... 01755 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01756 1744 NtContinue (1244336, 0, ... 01757 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01758 1744 NtContinue (1244336, 0, ... 01759 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01760 1744 NtContinue (1244336, 0, ... 01761 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01762 1744 NtContinue (1244336, 0, ... 01763 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01764 1744 NtContinue (1244336, 0, ... 01765 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01766 1744 NtContinue (1244336, 0, ... 01767 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01768 1744 NtContinue (1244336, 0, ... 01769 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01770 1744 NtContinue (1244336, 0, ... 01771 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01772 1744 NtContinue (1244336, 0, ... 01773 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01774 1744 NtContinue (1244336, 0, ... 01775 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01776 1744 NtContinue (1244336, 0, ... 01777 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01778 1744 NtContinue (1244336, 0, ... 01779 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01780 1744 NtContinue (1244336, 0, ... 01781 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01782 1744 NtContinue (1244336, 0, ... 01783 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01784 1744 NtContinue (1244336, 0, ... 01785 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01786 1744 NtContinue (1244336, 0, ... 01787 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01788 1744 NtContinue (1244336, 0, ... 01789 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01790 1744 NtContinue (1244336, 0, ... 01791 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01792 1744 NtContinue (1244336, 0, ... 01793 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01794 1744 NtContinue (1244336, 0, ... 01795 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01796 1744 NtContinue (1244336, 0, ... 01797 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01798 1744 NtContinue (1244336, 0, ... 01799 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01800 1744 NtContinue (1244336, 0, ... 01801 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01802 1744 NtContinue (1244336, 0, ... 01803 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01804 1744 NtContinue (1244336, 0, ... 01805 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01806 1744 NtContinue (1244336, 0, ... 01807 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01808 1744 NtContinue (1244336, 0, ... 01809 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01810 1744 NtContinue (1244336, 0, ... 01811 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01812 1744 NtContinue (1244336, 0, ... 01813 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01814 1744 NtContinue (1244336, 0, ... 01815 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01816 1744 NtContinue (1244336, 0, ... 01817 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01818 1744 NtContinue (1244336, 0, ... 01819 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01820 1744 NtContinue (1244336, 0, ... 01821 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01822 1744 NtContinue (1244336, 0, ... 01823 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01824 1744 NtContinue (1244336, 0, ... 01825 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01826 1744 NtContinue (1244336, 0, ... 01827 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01828 1744 NtContinue (1244336, 0, ... 01829 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01830 1744 NtContinue (1244336, 0, ... 01831 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01832 1744 NtContinue (1244336, 0, ... 01833 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01834 1744 NtContinue (1244336, 0, ... 01835 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01836 1744 NtContinue (1244336, 0, ... 01837 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01838 1744 NtContinue (1244336, 0, ... 01839 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01840 1744 NtContinue (1244336, 0, ... 01841 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01842 1744 NtContinue (1244336, 0, ... 01843 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01844 1744 NtContinue (1244336, 0, ... 01845 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01846 1744 NtContinue (1244336, 0, ... 01847 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01848 1744 NtContinue (1244336, 0, ... 01849 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01850 1744 NtContinue (1244336, 0, ... 01851 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01852 1744 NtContinue (1244336, 0, ... 01853 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01854 1744 NtContinue (1244336, 0, ... 01855 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01856 1744 NtContinue (1244336, 0, ... 01857 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01858 1744 NtContinue (1244336, 0, ... 01859 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01860 1744 NtContinue (1244336, 0, ... 01861 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01862 1744 NtContinue (1244336, 0, ... 01863 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01864 1744 NtContinue (1244336, 0, ... 01865 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01866 1744 NtContinue (1244336, 0, ... 01867 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01868 1744 NtContinue (1244336, 0, ... 01869 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01870 1744 NtContinue (1244336, 0, ... 01871 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01872 1744 NtContinue (1244336, 0, ... 01873 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01874 1744 NtContinue (1244336, 0, ... 01875 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01876 1744 NtContinue (1244336, 0, ... 01877 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01878 1744 NtContinue (1244336, 0, ... 01879 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01880 1744 NtContinue (1244336, 0, ... 01881 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01882 1744 NtContinue (1244336, 0, ... 01883 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01884 1744 NtContinue (1244336, 0, ... 01885 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01886 1744 NtContinue (1244336, 0, ... 01887 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01888 1744 NtContinue (1244336, 0, ... 01889 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01890 1744 NtContinue (1244336, 0, ... 01891 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01892 1744 NtContinue (1244336, 0, ... 01893 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01894 1744 NtContinue (1244336, 0, ... 01895 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01896 1744 NtContinue (1244336, 0, ... 01897 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01898 1744 NtContinue (1244336, 0, ... 01899 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01900 1744 NtContinue (1244336, 0, ... 01901 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01902 1744 NtContinue (1244336, 0, ... 01903 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01904 1744 NtContinue (1244336, 0, ... 01905 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01906 1744 NtContinue (1244336, 0, ... 01907 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01908 1744 NtContinue (1244336, 0, ... 01909 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01910 1744 NtContinue (1244336, 0, ... 01911 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01912 1744 NtContinue (1244336, 0, ... 01913 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01914 1744 NtContinue (1244336, 0, ... 01915 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01916 1744 NtContinue (1244336, 0, ... 01917 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01918 1744 NtContinue (1244336, 0, ... 01919 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01920 1744 NtContinue (1244336, 0, ... 01921 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01922 1744 NtContinue (1244336, 0, ... 01923 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01924 1744 NtContinue (1244336, 0, ... 01925 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01926 1744 NtContinue (1244336, 0, ... 01927 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01928 1744 NtContinue (1244336, 0, ... 01929 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01930 1744 NtContinue (1244336, 0, ... 01931 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01932 1744 NtContinue (1244336, 0, ... 01933 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01934 1744 NtContinue (1244336, 0, ... 01935 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01936 1744 NtContinue (1244336, 0, ... 01937 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01938 1744 NtContinue (1244336, 0, ... 01939 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01940 1744 NtContinue (1244336, 0, ... 01941 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01942 1744 NtContinue (1244336, 0, ... 01943 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01944 1744 NtContinue (1244336, 0, ... 01945 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01946 1744 NtContinue (1244336, 0, ... 01947 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01948 1744 NtContinue (1244336, 0, ... 01949 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01950 1744 NtContinue (1244336, 0, ... 01951 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01952 1744 NtContinue (1244336, 0, ... 01953 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01954 1744 NtContinue (1244336, 0, ... 01955 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01956 1744 NtContinue (1244336, 0, ... 01957 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01958 1744 NtContinue (1244336, 0, ... 01959 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01960 1744 NtContinue (1244336, 0, ... 01961 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01962 1744 NtContinue (1244336, 0, ... 01963 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01964 1744 NtContinue (1244336, 0, ... 01965 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01966 1744 NtContinue (1244336, 0, ... 01967 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01968 1744 NtContinue (1244336, 0, ... 01969 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01970 1744 NtContinue (1244336, 0, ... 01971 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01972 1744 NtContinue (1244336, 0, ... 01973 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01974 1744 NtContinue (1244336, 0, ... 01975 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01976 1744 NtContinue (1244336, 0, ... 01977 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01978 1744 NtContinue (1244336, 0, ... 01979 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01980 1744 NtContinue (1244336, 0, ... 01981 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01982 1744 NtContinue (1244336, 0, ... 01983 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01984 1744 NtContinue (1244336, 0, ... 01985 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01986 1744 NtContinue (1244336, 0, ... 01987 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01988 1744 NtContinue (1244336, 0, ... 01989 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01990 1744 NtContinue (1244336, 0, ... 01991 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01992 1744 NtContinue (1244336, 0, ... 01993 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01994 1744 NtContinue (1244336, 0, ... 01995 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01996 1744 NtContinue (1244336, 0, ... 01997 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01998 1744 NtContinue (1244336, 0, ... 01999 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02000 1744 NtContinue (1244336, 0, ... 02001 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02002 1744 NtContinue (1244336, 0, ... 02003 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02004 1744 NtContinue (1244336, 0, ... 02005 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02006 1744 NtContinue (1244336, 0, ... 02007 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02008 1744 NtContinue (1244336, 0, ... 02009 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02010 1744 NtContinue (1244336, 0, ... 02011 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02012 1744 NtContinue (1244336, 0, ... 02013 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02014 1744 NtContinue (1244336, 0, ... 02015 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02016 1744 NtContinue (1244336, 0, ... 02017 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02018 1744 NtContinue (1244336, 0, ... 02019 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02020 1744 NtContinue (1244336, 0, ... 02021 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02022 1744 NtContinue (1244336, 0, ... 02023 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02024 1744 NtContinue (1244336, 0, ... 02025 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02026 1744 NtContinue (1244336, 0, ... 02027 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02028 1744 NtContinue (1244336, 0, ... 02029 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02030 1744 NtContinue (1244336, 0, ... 02031 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02032 1744 NtContinue (1244336, 0, ... 02033 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02034 1744 NtContinue (1244336, 0, ... 02035 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02036 1744 NtContinue (1244336, 0, ... 02037 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02038 1744 NtContinue (1244336, 0, ... 02039 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02040 1744 NtContinue (1244336, 0, ... 02041 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02042 1744 NtContinue (1244336, 0, ... 02043 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02044 1744 NtContinue (1244336, 0, ... 02045 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02046 1744 NtContinue (1244336, 0, ... 02047 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02048 1744 NtContinue (1244336, 0, ... 02049 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02050 1744 NtContinue (1244336, 0, ... 02051 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02052 1744 NtContinue (1244336, 0, ... 02053 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02054 1744 NtContinue (1244336, 0, ... 02055 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02056 1744 NtContinue (1244336, 0, ... 02057 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02058 1744 NtContinue (1244336, 0, ... 02059 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02060 1744 NtContinue (1244336, 0, ... 02061 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02062 1744 NtContinue (1244336, 0, ... 02063 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02064 1744 NtContinue (1244336, 0, ... 02065 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02066 1744 NtContinue (1244336, 0, ... 02067 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02068 1744 NtContinue (1244336, 0, ... 02069 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02070 1744 NtContinue (1244336, 0, ... 02071 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02072 1744 NtContinue (1244336, 0, ... 02073 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02074 1744 NtContinue (1244336, 0, ... 02075 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02076 1744 NtContinue (1244336, 0, ... 02077 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02078 1744 NtContinue (1244336, 0, ... 02079 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02080 1744 NtContinue (1244336, 0, ... 02081 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02082 1744 NtContinue (1244336, 0, ... 02083 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02084 1744 NtContinue (1244336, 0, ... 02085 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02086 1744 NtContinue (1244336, 0, ... 02087 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02088 1744 NtContinue (1244336, 0, ... 02089 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02090 1744 NtContinue (1244336, 0, ... 02091 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02092 1744 NtContinue (1244336, 0, ... 02093 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02094 1744 NtContinue (1244336, 0, ... 02095 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02096 1744 NtContinue (1244336, 0, ... 02097 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02098 1744 NtContinue (1244336, 0, ... 02099 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02100 1744 NtContinue (1244336, 0, ... 02101 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02102 1744 NtContinue (1244336, 0, ... 02103 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02104 1744 NtContinue (1244336, 0, ... 02105 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02106 1744 NtContinue (1244336, 0, ... 02107 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02108 1744 NtContinue (1244336, 0, ... 02109 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02110 1744 NtContinue (1244336, 0, ... 02111 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02112 1744 NtContinue (1244336, 0, ... 02113 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02114 1744 NtContinue (1244336, 0, ... 02115 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02116 1744 NtContinue (1244336, 0, ... 02117 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02118 1744 NtContinue (1244336, 0, ... 02119 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02120 1744 NtContinue (1244336, 0, ... 02121 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02122 1744 NtContinue (1244336, 0, ... 02123 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02124 1744 NtContinue (1244336, 0, ... 02125 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02126 1744 NtContinue (1244336, 0, ... 02127 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02128 1744 NtContinue (1244336, 0, ... 02129 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02130 1744 NtContinue (1244336, 0, ... 02131 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02132 1744 NtContinue (1244336, 0, ... 02133 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02134 1744 NtContinue (1244336, 0, ... 02135 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02136 1744 NtContinue (1244336, 0, ... 02137 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02138 1744 NtContinue (1244336, 0, ... 02139 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02140 1744 NtContinue (1244336, 0, ... 02141 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02142 1744 NtContinue (1244336, 0, ... 02143 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02144 1744 NtContinue (1244336, 0, ... 02145 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02146 1744 NtContinue (1244336, 0, ... 02147 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02148 1744 NtContinue (1244336, 0, ... 02149 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02150 1744 NtContinue (1244336, 0, ... 02151 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02152 1744 NtContinue (1244336, 0, ... 02153 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02154 1744 NtContinue (1244336, 0, ... 02155 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02156 1744 NtContinue (1244336, 0, ... 02157 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02158 1744 NtContinue (1244336, 0, ... 02159 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02160 1744 NtContinue (1244336, 0, ... 02161 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02162 1744 NtContinue (1244336, 0, ... 02163 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02164 1744 NtContinue (1244336, 0, ... 02165 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02166 1744 NtContinue (1244336, 0, ... 02167 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02168 1744 NtContinue (1244336, 0, ... 02169 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02170 1744 NtContinue (1244336, 0, ... 02171 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02172 1744 NtContinue (1244336, 0, ... 02173 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02174 1744 NtContinue (1244336, 0, ... 02175 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02176 1744 NtContinue (1244336, 0, ... 02177 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02178 1744 NtContinue (1244336, 0, ... 02179 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02180 1744 NtContinue (1244336, 0, ... 02181 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02182 1744 NtContinue (1244336, 0, ... 02183 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02184 1744 NtContinue (1244336, 0, ... 02185 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02186 1744 NtContinue (1244336, 0, ... 02187 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02188 1744 NtContinue (1244336, 0, ... 02189 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02190 1744 NtContinue (1244336, 0, ... 02191 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02192 1744 NtContinue (1244336, 0, ... 02193 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02194 1744 NtContinue (1244336, 0, ... 02195 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02196 1744 NtContinue (1244336, 0, ... 02197 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02198 1744 NtContinue (1244336, 0, ... 02199 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02200 1744 NtContinue (1244336, 0, ... 02201 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02202 1744 NtContinue (1244336, 0, ... 02203 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02204 1744 NtContinue (1244336, 0, ... 02205 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02206 1744 NtContinue (1244336, 0, ... 02207 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02208 1744 NtContinue (1244336, 0, ... 02209 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02210 1744 NtContinue (1244336, 0, ... 02211 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02212 1744 NtContinue (1244336, 0, ... 02213 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02214 1744 NtContinue (1244336, 0, ... 02215 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02216 1744 NtContinue (1244336, 0, ... 02217 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02218 1744 NtContinue (1244336, 0, ... 02219 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02220 1744 NtContinue (1244336, 0, ... 02221 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02222 1744 NtContinue (1244336, 0, ... 02223 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02224 1744 NtContinue (1244336, 0, ... 02225 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02226 1744 NtContinue (1244336, 0, ... 02227 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02228 1744 NtContinue (1244336, 0, ... 02229 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02230 1744 NtContinue (1244336, 0, ... 02231 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02232 1744 NtContinue (1244336, 0, ... 02233 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02234 1744 NtContinue (1244336, 0, ... 02235 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02236 1744 NtContinue (1244336, 0, ... 02237 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02238 1744 NtContinue (1244336, 0, ... 02239 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02240 1744 NtContinue (1244336, 0, ... 02241 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02242 1744 NtContinue (1244336, 0, ... 02243 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02244 1744 NtContinue (1244336, 0, ... 02245 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02246 1744 NtContinue (1244336, 0, ... 02247 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02248 1744 NtContinue (1244336, 0, ... 02249 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02250 1744 NtContinue (1244336, 0, ... 02251 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02252 1744 NtContinue (1244336, 0, ... 02253 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02254 1744 NtContinue (1244336, 0, ... 02255 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02256 1744 NtContinue (1244336, 0, ... 02257 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02258 1744 NtContinue (1244336, 0, ... 02259 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02260 1744 NtContinue (1244336, 0, ... 02261 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02262 1744 NtContinue (1244336, 0, ... 02263 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02264 1744 NtContinue (1244336, 0, ... 02265 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02266 1744 NtContinue (1244336, 0, ... 02267 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02268 1744 NtContinue (1244336, 0, ... 02269 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02270 1744 NtContinue (1244336, 0, ... 02271 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02272 1744 NtContinue (1244336, 0, ... 02273 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02274 1744 NtContinue (1244336, 0, ... 02275 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02276 1744 NtContinue (1244336, 0, ... 02277 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02278 1744 NtContinue (1244336, 0, ... 02279 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02280 1744 NtContinue (1244336, 0, ... 02281 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02282 1744 NtContinue (1244336, 0, ... 02283 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02284 1744 NtContinue (1244336, 0, ... 02285 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02286 1744 NtContinue (1244336, 0, ... 02287 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02288 1744 NtContinue (1244336, 0, ... 02289 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02290 1744 NtContinue (1244336, 0, ... 02291 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02292 1744 NtContinue (1244336, 0, ... 02293 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02294 1744 NtContinue (1244336, 0, ... 02295 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02296 1744 NtContinue (1244336, 0, ... 02297 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02298 1744 NtContinue (1244336, 0, ... 02299 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02300 1744 NtContinue (1244336, 0, ... 02301 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02302 1744 NtContinue (1244336, 0, ... 02303 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02304 1744 NtContinue (1244336, 0, ... 02305 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02306 1744 NtContinue (1244336, 0, ... 02307 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02308 1744 NtContinue (1244336, 0, ... 02309 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02310 1744 NtContinue (1244336, 0, ... 02311 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02312 1744 NtContinue (1244336, 0, ... 02313 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02314 1744 NtContinue (1244336, 0, ... 02315 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02316 1744 NtContinue (1244336, 0, ... 02317 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02318 1744 NtContinue (1244336, 0, ... 02319 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02320 1744 NtContinue (1244336, 0, ... 02321 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02322 1744 NtContinue (1244336, 0, ... 02323 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02324 1744 NtContinue (1244336, 0, ... 02325 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02326 1744 NtContinue (1244336, 0, ... 02327 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02328 1744 NtContinue (1244336, 0, ... 02329 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02330 1744 NtContinue (1244336, 0, ... 02331 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02332 1744 NtContinue (1244336, 0, ... 02333 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02334 1744 NtContinue (1244336, 0, ... 02335 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02336 1744 NtContinue (1244336, 0, ... 02337 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02338 1744 NtContinue (1244336, 0, ... 02339 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02340 1744 NtContinue (1244336, 0, ... 02341 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02342 1744 NtContinue (1244336, 0, ... 02343 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02344 1744 NtContinue (1244336, 0, ... 02345 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02346 1744 NtContinue (1244336, 0, ... 02347 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02348 1744 NtContinue (1244336, 0, ... 02349 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02350 1744 NtContinue (1244336, 0, ... 02351 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02352 1744 NtContinue (1244336, 0, ... 02353 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02354 1744 NtContinue (1244336, 0, ... 02355 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02356 1744 NtContinue (1244336, 0, ... 02357 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02358 1744 NtContinue (1244336, 0, ... 02359 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02360 1744 NtContinue (1244336, 0, ... 02361 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02362 1744 NtContinue (1244336, 0, ... 02363 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02364 1744 NtContinue (1244336, 0, ... 02365 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02366 1744 NtContinue (1244336, 0, ... 02367 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02368 1744 NtContinue (1244336, 0, ... 02369 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02370 1744 NtContinue (1244336, 0, ... 02371 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02372 1744 NtContinue (1244336, 0, ... 02373 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02374 1744 NtContinue (1244336, 0, ... 02375 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02376 1744 NtContinue (1244336, 0, ... 02377 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02378 1744 NtContinue (1244336, 0, ... 02379 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02380 1744 NtContinue (1244336, 0, ... 02381 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02382 1744 NtContinue (1244336, 0, ... 02383 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02384 1744 NtContinue (1244336, 0, ... 02385 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02386 1744 NtContinue (1244336, 0, ... 02387 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02388 1744 NtContinue (1244336, 0, ... 02389 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02390 1744 NtContinue (1244336, 0, ... 02391 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02392 1744 NtContinue (1244336, 0, ... 02393 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02394 1744 NtContinue (1244336, 0, ... 02395 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02396 1744 NtContinue (1244336, 0, ... 02397 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02398 1744 NtContinue (1244336, 0, ... 02399 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02400 1744 NtContinue (1244336, 0, ... 02401 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02402 1744 NtContinue (1244336, 0, ... 02403 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02404 1744 NtContinue (1244336, 0, ... 02405 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02406 1744 NtContinue (1244336, 0, ... 02407 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02408 1744 NtContinue (1244336, 0, ... 02409 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02410 1744 NtContinue (1244336, 0, ... 02411 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02412 1744 NtContinue (1244336, 0, ... 02413 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02414 1744 NtContinue (1244336, 0, ... 02415 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02416 1744 NtContinue (1244336, 0, ... 02417 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02418 1744 NtContinue (1244336, 0, ... 02419 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02420 1744 NtContinue (1244336, 0, ... 02421 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02422 1744 NtContinue (1244336, 0, ... 02423 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02424 1744 NtContinue (1244336, 0, ... 02425 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02426 1744 NtContinue (1244336, 0, ... 02427 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02428 1744 NtContinue (1244336, 0, ... 02429 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02430 1744 NtContinue (1244336, 0, ... 02431 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02432 1744 NtContinue (1244336, 0, ... 02433 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02434 1744 NtContinue (1244336, 0, ... 02435 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02436 1744 NtContinue (1244336, 0, ... 02437 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02438 1744 NtContinue (1244336, 0, ... 02439 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02440 1744 NtContinue (1244336, 0, ... 02441 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02442 1744 NtContinue (1244336, 0, ... 02443 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02444 1744 NtContinue (1244336, 0, ... 02445 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02446 1744 NtContinue (1244336, 0, ... 02447 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02448 1744 NtContinue (1244336, 0, ... 02449 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02450 1744 NtContinue (1244336, 0, ... 02451 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02452 1744 NtContinue (1244336, 0, ... 02453 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02454 1744 NtContinue (1244336, 0, ... 02455 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02456 1744 NtContinue (1244336, 0, ... 02457 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02458 1744 NtContinue (1244336, 0, ... 02459 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02460 1744 NtContinue (1244336, 0, ... 02461 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02462 1744 NtContinue (1244336, 0, ... 02463 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02464 1744 NtContinue (1244336, 0, ... 02465 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02466 1744 NtContinue (1244336, 0, ... 02467 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02468 1744 NtContinue (1244336, 0, ... 02469 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02470 1744 NtContinue (1244336, 0, ... 02471 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02472 1744 NtContinue (1244336, 0, ... 02473 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02474 1744 NtContinue (1244336, 0, ... 02475 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02476 1744 NtContinue (1244336, 0, ... 02477 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02478 1744 NtContinue (1244336, 0, ... 02479 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02480 1744 NtContinue (1244336, 0, ... 02481 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02482 1744 NtContinue (1244336, 0, ... 02483 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02484 1744 NtContinue (1244336, 0, ... 02485 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02486 1744 NtContinue (1244336, 0, ... 02487 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02488 1744 NtContinue (1244336, 0, ... 02489 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02490 1744 NtContinue (1244336, 0, ... 02491 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02492 1744 NtContinue (1244336, 0, ... 02493 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02494 1744 NtContinue (1244336, 0, ... 02495 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02496 1744 NtContinue (1244336, 0, ... 02497 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02498 1744 NtContinue (1244336, 0, ... 02499 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02500 1744 NtContinue (1244336, 0, ... 02501 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02502 1744 NtContinue (1244336, 0, ... 02503 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02504 1744 NtContinue (1244336, 0, ... 02505 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02506 1744 NtContinue (1244336, 0, ... 02507 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02508 1744 NtContinue (1244336, 0, ... 02509 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02510 1744 NtContinue (1244336, 0, ... 02511 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02512 1744 NtContinue (1244336, 0, ... 02513 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02514 1744 NtContinue (1244336, 0, ... 02515 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02516 1744 NtContinue (1244336, 0, ... 02517 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02518 1744 NtContinue (1244336, 0, ... 02519 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02520 1744 NtContinue (1244336, 0, ... 02521 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02522 1744 NtContinue (1244336, 0, ... 02523 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02524 1744 NtContinue (1244336, 0, ... 02525 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02526 1744 NtContinue (1244336, 0, ... 02527 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02528 1744 NtContinue (1244336, 0, ... 02529 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02530 1744 NtContinue (1244336, 0, ... 02531 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02532 1744 NtContinue (1244336, 0, ... 02533 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02534 1744 NtContinue (1244336, 0, ... 02535 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02536 1744 NtContinue (1244336, 0, ... 02537 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02538 1744 NtContinue (1244336, 0, ... 02539 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02540 1744 NtContinue (1244336, 0, ... 02541 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02542 1744 NtContinue (1244336, 0, ... 02543 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02544 1744 NtContinue (1244336, 0, ... 02545 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02546 1744 NtContinue (1244336, 0, ... 02547 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02548 1744 NtContinue (1244336, 0, ... 02549 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02550 1744 NtContinue (1244336, 0, ... 02551 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02552 1744 NtContinue (1244336, 0, ... 02553 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02554 1744 NtContinue (1244336, 0, ... 02555 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02556 1744 NtContinue (1244336, 0, ... 02557 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02558 1744 NtContinue (1244336, 0, ... 02559 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02560 1744 NtContinue (1244336, 0, ... 02561 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02562 1744 NtContinue (1244336, 0, ... 02563 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02564 1744 NtContinue (1244336, 0, ... 02565 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02566 1744 NtContinue (1244336, 0, ... 02567 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02568 1744 NtContinue (1244336, 0, ... 02569 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02570 1744 NtContinue (1244336, 0, ... 02571 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02572 1744 NtContinue (1244336, 0, ... 02573 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02574 1744 NtContinue (1244336, 0, ... 02575 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02576 1744 NtContinue (1244336, 0, ... 02577 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02578 1744 NtContinue (1244336, 0, ... 02579 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02580 1744 NtContinue (1244336, 0, ... 02581 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02582 1744 NtContinue (1244336, 0, ... 02583 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02584 1744 NtContinue (1244336, 0, ... 02585 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02586 1744 NtContinue (1244336, 0, ... 02587 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02588 1744 NtContinue (1244336, 0, ... 02589 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02590 1744 NtContinue (1244336, 0, ... 02591 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02592 1744 NtContinue (1244336, 0, ... 02593 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02594 1744 NtContinue (1244336, 0, ... 02595 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02596 1744 NtContinue (1244336, 0, ... 02597 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02598 1744 NtContinue (1244336, 0, ... 02599 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02600 1744 NtContinue (1244336, 0, ... 02601 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02602 1744 NtContinue (1244336, 0, ... 02603 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02604 1744 NtContinue (1244336, 0, ... 02605 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02606 1744 NtContinue (1244336, 0, ... 02607 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02608 1744 NtContinue (1244336, 0, ... 02609 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02610 1744 NtContinue (1244336, 0, ... 02611 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02612 1744 NtContinue (1244336, 0, ... 02613 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02614 1744 NtContinue (1244336, 0, ... 02615 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02616 1744 NtContinue (1244336, 0, ... 02617 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02618 1744 NtContinue (1244336, 0, ... 02619 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02620 1744 NtContinue (1244336, 0, ... 02621 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02622 1744 NtContinue (1244336, 0, ... 02623 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02624 1744 NtContinue (1244336, 0, ... 02625 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02626 1744 NtContinue (1244336, 0, ... 02627 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02628 1744 NtContinue (1244336, 0, ... 02629 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02630 1744 NtContinue (1244336, 0, ... 02631 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02632 1744 NtContinue (1244336, 0, ... 02633 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02634 1744 NtContinue (1244336, 0, ... 02635 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02636 1744 NtContinue (1244336, 0, ... 02637 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02638 1744 NtContinue (1244336, 0, ... 02639 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02640 1744 NtContinue (1244336, 0, ... 02641 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02642 1744 NtContinue (1244336, 0, ... 02643 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02644 1744 NtContinue (1244336, 0, ... 02645 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02646 1744 NtContinue (1244336, 0, ... 02647 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02648 1744 NtContinue (1244336, 0, ... 02649 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02650 1744 NtContinue (1244336, 0, ... 02651 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02652 1744 NtContinue (1244336, 0, ... 02653 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02654 1744 NtContinue (1244336, 0, ... 02655 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02656 1744 NtContinue (1244336, 0, ... 02657 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02658 1744 NtContinue (1244336, 0, ... 02659 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02660 1744 NtContinue (1244336, 0, ... 02661 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02662 1744 NtContinue (1244336, 0, ... 02663 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02664 1744 NtContinue (1244336, 0, ... 02665 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02666 1744 NtContinue (1244336, 0, ... 02667 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02668 1744 NtContinue (1244336, 0, ... 02669 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02670 1744 NtContinue (1244336, 0, ... 02671 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02672 1744 NtContinue (1244336, 0, ... 02673 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02674 1744 NtContinue (1244336, 0, ... 02675 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02676 1744 NtContinue (1244336, 0, ... 02677 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02678 1744 NtContinue (1244336, 0, ... 02679 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02680 1744 NtContinue (1244336, 0, ... 02681 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02682 1744 NtContinue (1244336, 0, ... 02683 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02684 1744 NtContinue (1244336, 0, ... 02685 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02686 1744 NtContinue (1244336, 0, ... 02687 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02688 1744 NtContinue (1244336, 0, ... 02689 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02690 1744 NtContinue (1244336, 0, ... 02691 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02692 1744 NtContinue (1244336, 0, ... 02693 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02694 1744 NtContinue (1244336, 0, ... 02695 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02696 1744 NtContinue (1244336, 0, ... 02697 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02698 1744 NtContinue (1244336, 0, ... 02699 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02700 1744 NtContinue (1244336, 0, ... 02701 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02702 1744 NtContinue (1244336, 0, ... 02703 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02704 1744 NtContinue (1244336, 0, ... 02705 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02706 1744 NtContinue (1244336, 0, ... 02707 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02708 1744 NtContinue (1244336, 0, ... 02709 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02710 1744 NtContinue (1244336, 0, ... 02711 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02712 1744 NtContinue (1244336, 0, ... 02713 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02714 1744 NtContinue (1244336, 0, ... 02715 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02716 1744 NtContinue (1244336, 0, ... 02717 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02718 1744 NtContinue (1244336, 0, ... 02719 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02720 1744 NtContinue (1244336, 0, ... 02721 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02722 1744 NtContinue (1244336, 0, ... 02723 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02724 1744 NtContinue (1244336, 0, ... 02725 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02726 1744 NtContinue (1244336, 0, ... 02727 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02728 1744 NtContinue (1244336, 0, ... 02729 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02730 1744 NtContinue (1244336, 0, ... 02731 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02732 1744 NtContinue (1244336, 0, ... 02733 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02734 1744 NtContinue (1244336, 0, ... 02735 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02736 1744 NtContinue (1244336, 0, ... 02737 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02738 1744 NtContinue (1244336, 0, ... 02739 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02740 1744 NtContinue (1244336, 0, ... 02741 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02742 1744 NtContinue (1244336, 0, ... 02743 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02744 1744 NtContinue (1244336, 0, ... 02745 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02746 1744 NtContinue (1244336, 0, ... 02747 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02748 1744 NtContinue (1244336, 0, ... 02749 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02750 1744 NtContinue (1244336, 0, ... 02751 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02752 1744 NtContinue (1244336, 0, ... 02753 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02754 1744 NtContinue (1244336, 0, ... 02755 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02756 1744 NtContinue (1244336, 0, ... 02757 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02758 1744 NtContinue (1244336, 0, ... 02759 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02760 1744 NtContinue (1244336, 0, ... 02761 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02762 1744 NtContinue (1244336, 0, ... 02763 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02764 1744 NtContinue (1244336, 0, ... 02765 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02766 1744 NtContinue (1244336, 0, ... 02767 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02768 1744 NtContinue (1244336, 0, ... 02769 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02770 1744 NtContinue (1244336, 0, ... 02771 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02772 1744 NtContinue (1244336, 0, ... 02773 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02774 1744 NtContinue (1244336, 0, ... 02775 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02776 1744 NtContinue (1244336, 0, ... 02777 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02778 1744 NtContinue (1244336, 0, ... 02779 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02780 1744 NtContinue (1244336, 0, ... 02781 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02782 1744 NtContinue (1244336, 0, ... 02783 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02784 1744 NtContinue (1244336, 0, ... 02785 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02786 1744 NtContinue (1244336, 0, ... 02787 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02788 1744 NtContinue (1244336, 0, ... 02789 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02790 1744 NtContinue (1244336, 0, ... 02791 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02792 1744 NtContinue (1244336, 0, ... 02793 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02794 1744 NtContinue (1244336, 0, ... 02795 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02796 1744 NtContinue (1244336, 0, ... 02797 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02798 1744 NtContinue (1244336, 0, ... 02799 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02800 1744 NtContinue (1244336, 0, ... 02801 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02802 1744 NtContinue (1244336, 0, ... 02803 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02804 1744 NtContinue (1244336, 0, ... 02805 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02806 1744 NtContinue (1244336, 0, ... 02807 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02808 1744 NtContinue (1244336, 0, ... 02809 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02810 1744 NtContinue (1244336, 0, ... 02811 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02812 1744 NtContinue (1244336, 0, ... 02813 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02814 1744 NtContinue (1244336, 0, ... 02815 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02816 1744 NtContinue (1244336, 0, ... 02817 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02818 1744 NtContinue (1244336, 0, ... 02819 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02820 1744 NtContinue (1244336, 0, ... 02821 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02822 1744 NtContinue (1244336, 0, ... 02823 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02824 1744 NtContinue (1244336, 0, ... 02825 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02826 1744 NtContinue (1244336, 0, ... 02827 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02828 1744 NtContinue (1244336, 0, ... 02829 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02830 1744 NtContinue (1244336, 0, ... 02831 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02832 1744 NtContinue (1244336, 0, ... 02833 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02834 1744 NtContinue (1244336, 0, ... 02835 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02836 1744 NtContinue (1244336, 0, ... 02837 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02838 1744 NtContinue (1244336, 0, ... 02839 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02840 1744 NtContinue (1244336, 0, ... 02841 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02842 1744 NtContinue (1244336, 0, ... 02843 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02844 1744 NtContinue (1244336, 0, ... 02845 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02846 1744 NtContinue (1244336, 0, ... 02847 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02848 1744 NtContinue (1244336, 0, ... 02849 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02850 1744 NtContinue (1244336, 0, ... 02851 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02852 1744 NtContinue (1244336, 0, ... 02853 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02854 1744 NtContinue (1244336, 0, ... 02855 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02856 1744 NtContinue (1244336, 0, ... 02857 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02858 1744 NtContinue (1244336, 0, ... 02859 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02860 1744 NtContinue (1244336, 0, ... 02861 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02862 1744 NtContinue (1244336, 0, ... 02863 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02864 1744 NtContinue (1244336, 0, ... 02865 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02866 1744 NtContinue (1244336, 0, ... 02867 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02868 1744 NtContinue (1244336, 0, ... 02869 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02870 1744 NtContinue (1244336, 0, ... 02871 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02872 1744 NtContinue (1244336, 0, ... 02873 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02874 1744 NtContinue (1244336, 0, ... 02875 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02876 1744 NtContinue (1244336, 0, ... 02877 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02878 1744 NtContinue (1244336, 0, ... 02879 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02880 1744 NtContinue (1244336, 0, ... 02881 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02882 1744 NtContinue (1244336, 0, ... 02883 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02884 1744 NtContinue (1244336, 0, ... 02885 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02886 1744 NtContinue (1244336, 0, ... 02887 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02888 1744 NtContinue (1244336, 0, ... 02889 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02890 1744 NtContinue (1244336, 0, ... 02891 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02892 1744 NtContinue (1244336, 0, ... 02893 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02894 1744 NtContinue (1244336, 0, ... 02895 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02896 1744 NtContinue (1244336, 0, ... 02897 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02898 1744 NtContinue (1244336, 0, ... 02899 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02900 1744 NtContinue (1244336, 0, ... 02901 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02902 1744 NtContinue (1244336, 0, ... 02903 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02904 1744 NtContinue (1244336, 0, ... 02905 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02906 1744 NtContinue (1244336, 0, ... 02907 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02908 1744 NtContinue (1244336, 0, ... 02909 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02910 1744 NtContinue (1244336, 0, ... 02911 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02912 1744 NtContinue (1244336, 0, ... 02913 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02914 1744 NtContinue (1244336, 0, ... 02915 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02916 1744 NtContinue (1244336, 0, ... 02917 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02918 1744 NtContinue (1244336, 0, ... 02919 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02920 1744 NtContinue (1244336, 0, ... 02921 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02922 1744 NtContinue (1244336, 0, ... 02923 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02924 1744 NtContinue (1244336, 0, ... 02925 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02926 1744 NtContinue (1244336, 0, ... 02927 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02928 1744 NtContinue (1244336, 0, ... 02929 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02930 1744 NtContinue (1244336, 0, ... 02931 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02932 1744 NtContinue (1244336, 0, ... 02933 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02934 1744 NtContinue (1244336, 0, ... 02935 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02936 1744 NtContinue (1244336, 0, ... 02937 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02938 1744 NtContinue (1244336, 0, ... 02939 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02940 1744 NtContinue (1244336, 0, ... 02941 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02942 1744 NtContinue (1244336, 0, ... 02943 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02944 1744 NtContinue (1244336, 0, ... 02945 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02946 1744 NtContinue (1244336, 0, ... 02947 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02948 1744 NtContinue (1244336, 0, ... 02949 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02950 1744 NtContinue (1244336, 0, ... 02951 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02952 1744 NtContinue (1244336, 0, ... 02953 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02954 1744 NtContinue (1244336, 0, ... 02955 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02956 1744 NtContinue (1244336, 0, ... 02957 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02958 1744 NtContinue (1244336, 0, ... 02959 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02960 1744 NtContinue (1244336, 0, ... 02961 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02962 1744 NtContinue (1244336, 0, ... 02963 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02964 1744 NtContinue (1244336, 0, ... 02965 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02966 1744 NtContinue (1244336, 0, ... 02967 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02968 1744 NtContinue (1244336, 0, ... 02969 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02970 1744 NtContinue (1244336, 0, ... 02971 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02972 1744 NtContinue (1244336, 0, ... 02973 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02974 1744 NtContinue (1244336, 0, ... 02975 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02976 1744 NtContinue (1244336, 0, ... 02977 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02978 1744 NtContinue (1244336, 0, ... 02979 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02980 1744 NtContinue (1244336, 0, ... 02981 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02982 1744 NtContinue (1244336, 0, ... 02983 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02984 1744 NtContinue (1244336, 0, ... 02985 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02986 1744 NtContinue (1244336, 0, ... 02987 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02988 1744 NtContinue (1244336, 0, ... 02989 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02990 1744 NtContinue (1244336, 0, ... 02991 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02992 1744 NtContinue (1244336, 0, ... 02993 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02994 1744 NtContinue (1244336, 0, ... 02995 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02996 1744 NtContinue (1244336, 0, ... 02997 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02998 1744 NtContinue (1244336, 0, ... 02999 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03000 1744 NtContinue (1244336, 0, ... 03001 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03002 1744 NtContinue (1244336, 0, ... 03003 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03004 1744 NtContinue (1244336, 0, ... 03005 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03006 1744 NtContinue (1244336, 0, ... 03007 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03008 1744 NtContinue (1244336, 0, ... 03009 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03010 1744 NtContinue (1244336, 0, ... 03011 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03012 1744 NtContinue (1244336, 0, ... 03013 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03014 1744 NtContinue (1244336, 0, ... 03015 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03016 1744 NtContinue (1244336, 0, ... 03017 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03018 1744 NtContinue (1244336, 0, ... 03019 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03020 1744 NtContinue (1244336, 0, ... 03021 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03022 1744 NtContinue (1244336, 0, ... 03023 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03024 1744 NtContinue (1244336, 0, ... 03025 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03026 1744 NtContinue (1244336, 0, ... 03027 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03028 1744 NtContinue (1244336, 0, ... 03029 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03030 1744 NtContinue (1244336, 0, ... 03031 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03032 1744 NtContinue (1244336, 0, ... 03033 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03034 1744 NtContinue (1244336, 0, ... 03035 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03036 1744 NtContinue (1244336, 0, ... 03037 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03038 1744 NtContinue (1244336, 0, ... 03039 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03040 1744 NtContinue (1244336, 0, ... 03041 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03042 1744 NtContinue (1244336, 0, ... 03043 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03044 1744 NtContinue (1244336, 0, ... 03045 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03046 1744 NtContinue (1244336, 0, ... 03047 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03048 1744 NtContinue (1244336, 0, ... 03049 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03050 1744 NtContinue (1244336, 0, ... 03051 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03052 1744 NtContinue (1244336, 0, ... 03053 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03054 1744 NtContinue (1244336, 0, ... 03055 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03056 1744 NtContinue (1244336, 0, ... 03057 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03058 1744 NtContinue (1244336, 0, ... 03059 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03060 1744 NtContinue (1244336, 0, ... 03061 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03062 1744 NtContinue (1244336, 0, ... 03063 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03064 1744 NtContinue (1244336, 0, ... 03065 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03066 1744 NtContinue (1244336, 0, ... 03067 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03068 1744 NtContinue (1244336, 0, ... 03069 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03070 1744 NtContinue (1244336, 0, ... 03071 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03072 1744 NtContinue (1244336, 0, ... 03073 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03074 1744 NtContinue (1244336, 0, ... 03075 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03076 1744 NtContinue (1244336, 0, ... 03077 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03078 1744 NtContinue (1244336, 0, ... 03079 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03080 1744 NtContinue (1244336, 0, ... 03081 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03082 1744 NtContinue (1244336, 0, ... 03083 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03084 1744 NtContinue (1244336, 0, ... 03085 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03086 1744 NtContinue (1244336, 0, ... 03087 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03088 1744 NtContinue (1244336, 0, ... 03089 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03090 1744 NtContinue (1244336, 0, ... 03091 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03092 1744 NtContinue (1244336, 0, ... 03093 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03094 1744 NtContinue (1244336, 0, ... 03095 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03096 1744 NtContinue (1244336, 0, ... 03097 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03098 1744 NtContinue (1244336, 0, ... 03099 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03100 1744 NtContinue (1244336, 0, ... 03101 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03102 1744 NtContinue (1244336, 0, ... 03103 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03104 1744 NtContinue (1244336, 0, ... 03105 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03106 1744 NtContinue (1244336, 0, ... 03107 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03108 1744 NtContinue (1244336, 0, ... 03109 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03110 1744 NtContinue (1244336, 0, ... 03111 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03112 1744 NtContinue (1244336, 0, ... 03113 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03114 1744 NtContinue (1244336, 0, ... 03115 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03116 1744 NtContinue (1244336, 0, ... 03117 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03118 1744 NtContinue (1244336, 0, ... 03119 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03120 1744 NtContinue (1244336, 0, ... 03121 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03122 1744 NtContinue (1244336, 0, ... 03123 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03124 1744 NtContinue (1244336, 0, ... 03125 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03126 1744 NtContinue (1244336, 0, ... 03127 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03128 1744 NtContinue (1244336, 0, ... 03129 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03130 1744 NtContinue (1244336, 0, ... 03131 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03132 1744 NtContinue (1244336, 0, ... 03133 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03134 1744 NtContinue (1244336, 0, ... 03135 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03136 1744 NtContinue (1244336, 0, ... 03137 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03138 1744 NtContinue (1244336, 0, ... 03139 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03140 1744 NtContinue (1244336, 0, ... 03141 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03142 1744 NtContinue (1244336, 0, ... 03143 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03144 1744 NtContinue (1244336, 0, ... 03145 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03146 1744 NtContinue (1244336, 0, ... 03147 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03148 1744 NtContinue (1244336, 0, ... 03149 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03150 1744 NtContinue (1244336, 0, ... 03151 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03152 1744 NtContinue (1244336, 0, ... 03153 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03154 1744 NtContinue (1244336, 0, ... 03155 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03156 1744 NtContinue (1244336, 0, ... 03157 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03158 1744 NtContinue (1244336, 0, ... 03159 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03160 1744 NtContinue (1244336, 0, ... 03161 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03162 1744 NtContinue (1244336, 0, ... 03163 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03164 1744 NtContinue (1244336, 0, ... 03165 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03166 1744 NtContinue (1244336, 0, ... 03167 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03168 1744 NtContinue (1244336, 0, ... 03169 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03170 1744 NtContinue (1244336, 0, ... 03171 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03172 1744 NtContinue (1244336, 0, ... 03173 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03174 1744 NtContinue (1244336, 0, ... 03175 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03176 1744 NtContinue (1244336, 0, ... 03177 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03178 1744 NtContinue (1244336, 0, ... 03179 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03180 1744 NtContinue (1244336, 0, ... 03181 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03182 1744 NtContinue (1244336, 0, ... 03183 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03184 1744 NtContinue (1244336, 0, ... 03185 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03186 1744 NtContinue (1244336, 0, ... 03187 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03188 1744 NtContinue (1244336, 0, ... 03189 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03190 1744 NtContinue (1244336, 0, ... 03191 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03192 1744 NtContinue (1244336, 0, ... 03193 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03194 1744 NtContinue (1244336, 0, ... 03195 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03196 1744 NtContinue (1244336, 0, ... 03197 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03198 1744 NtContinue (1244336, 0, ... 03199 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03200 1744 NtContinue (1244336, 0, ... 03201 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03202 1744 NtContinue (1244336, 0, ... 03203 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03204 1744 NtContinue (1244336, 0, ... 03205 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03206 1744 NtContinue (1244336, 0, ... 03207 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03208 1744 NtContinue (1244336, 0, ... 03209 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03210 1744 NtContinue (1244336, 0, ... 03211 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03212 1744 NtContinue (1244336, 0, ... 03213 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03214 1744 NtContinue (1244336, 0, ... 03215 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03216 1744 NtContinue (1244336, 0, ... 03217 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03218 1744 NtContinue (1244336, 0, ... 03219 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03220 1744 NtContinue (1244336, 0, ... 03221 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03222 1744 NtContinue (1244336, 0, ... 03223 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03224 1744 NtContinue (1244336, 0, ... 03225 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03226 1744 NtContinue (1244336, 0, ... 03227 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03228 1744 NtContinue (1244336, 0, ... 03229 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03230 1744 NtContinue (1244336, 0, ... 03231 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03232 1744 NtContinue (1244336, 0, ... 03233 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03234 1744 NtContinue (1244336, 0, ... 03235 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03236 1744 NtContinue (1244336, 0, ... 03237 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03238 1744 NtContinue (1244336, 0, ... 03239 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03240 1744 NtContinue (1244336, 0, ... 03241 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03242 1744 NtContinue (1244336, 0, ... 03243 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03244 1744 NtContinue (1244336, 0, ... 03245 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03246 1744 NtContinue (1244336, 0, ... 03247 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03248 1744 NtContinue (1244336, 0, ... 03249 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03250 1744 NtContinue (1244336, 0, ... 03251 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03252 1744 NtContinue (1244336, 0, ... 03253 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03254 1744 NtContinue (1244336, 0, ... 03255 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03256 1744 NtContinue (1244336, 0, ... 03257 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03258 1744 NtContinue (1244336, 0, ... 03259 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03260 1744 NtContinue (1244336, 0, ... 03261 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03262 1744 NtContinue (1244336, 0, ... 03263 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03264 1744 NtContinue (1244336, 0, ... 03265 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03266 1744 NtContinue (1244336, 0, ... 03267 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03268 1744 NtContinue (1244336, 0, ... 03269 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03270 1744 NtContinue (1244336, 0, ... 03271 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03272 1744 NtContinue (1244336, 0, ... 03273 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03274 1744 NtContinue (1244336, 0, ... 03275 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03276 1744 NtContinue (1244336, 0, ... 03277 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03278 1744 NtContinue (1244336, 0, ... 03279 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03280 1744 NtContinue (1244336, 0, ... 03281 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03282 1744 NtContinue (1244336, 0, ... 03283 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03284 1744 NtContinue (1244336, 0, ... 03285 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03286 1744 NtContinue (1244336, 0, ... 03287 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03288 1744 NtContinue (1244336, 0, ... 03289 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03290 1744 NtContinue (1244336, 0, ... 03291 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03292 1744 NtContinue (1244336, 0, ... 03293 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03294 1744 NtContinue (1244336, 0, ... 03295 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03296 1744 NtContinue (1244336, 0, ... 03297 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03298 1744 NtContinue (1244336, 0, ... 03299 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03300 1744 NtContinue (1244336, 0, ... 03301 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03302 1744 NtContinue (1244336, 0, ... 03303 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03304 1744 NtContinue (1244336, 0, ... 03305 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03306 1744 NtContinue (1244336, 0, ... 03307 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03308 1744 NtContinue (1244336, 0, ... 03309 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03310 1744 NtContinue (1244336, 0, ... 03311 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03312 1744 NtContinue (1244336, 0, ... 03313 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03314 1744 NtContinue (1244336, 0, ... 03315 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03316 1744 NtContinue (1244336, 0, ... 03317 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03318 1744 NtContinue (1244336, 0, ... 03319 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03320 1744 NtContinue (1244336, 0, ... 03321 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03322 1744 NtContinue (1244336, 0, ... 03323 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03324 1744 NtContinue (1244336, 0, ... 03325 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03326 1744 NtContinue (1244336, 0, ... 03327 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03328 1744 NtContinue (1244336, 0, ... 03329 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03330 1744 NtContinue (1244336, 0, ... 03331 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03332 1744 NtContinue (1244336, 0, ... 03333 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03334 1744 NtContinue (1244336, 0, ... 03335 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03336 1744 NtContinue (1244336, 0, ... 03337 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03338 1744 NtContinue (1244336, 0, ... 03339 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03340 1744 NtContinue (1244336, 0, ... 03341 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03342 1744 NtContinue (1244336, 0, ... 03343 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03344 1744 NtContinue (1244336, 0, ... 03345 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03346 1744 NtContinue (1244336, 0, ... 03347 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03348 1744 NtContinue (1244336, 0, ... 03349 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03350 1744 NtContinue (1244336, 0, ... 03351 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03352 1744 NtContinue (1244336, 0, ... 03353 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03354 1744 NtContinue (1244336, 0, ... 03355 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03356 1744 NtContinue (1244336, 0, ... 03357 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03358 1744 NtContinue (1244336, 0, ... 03359 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03360 1744 NtContinue (1244336, 0, ... 03361 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03362 1744 NtContinue (1244336, 0, ... 03363 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03364 1744 NtContinue (1244336, 0, ... 03365 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03366 1744 NtContinue (1244336, 0, ... 03367 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03368 1744 NtContinue (1244336, 0, ... 03369 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03370 1744 NtContinue (1244336, 0, ... 03371 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03372 1744 NtContinue (1244336, 0, ... 03373 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03374 1744 NtContinue (1244336, 0, ... 03375 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03376 1744 NtContinue (1244336, 0, ... 03377 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03378 1744 NtContinue (1244336, 0, ... 03379 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03380 1744 NtContinue (1244336, 0, ... 03381 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03382 1744 NtContinue (1244336, 0, ... 03383 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03384 1744 NtContinue (1244336, 0, ... 03385 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03386 1744 NtContinue (1244336, 0, ... 03387 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03388 1744 NtContinue (1244336, 0, ... 03389 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03390 1744 NtContinue (1244336, 0, ... 03391 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03392 1744 NtContinue (1244336, 0, ... 03393 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03394 1744 NtContinue (1244336, 0, ... 03395 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03396 1744 NtContinue (1244336, 0, ... 03397 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03398 1744 NtContinue (1244336, 0, ... 03399 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03400 1744 NtContinue (1244336, 0, ... 03401 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03402 1744 NtContinue (1244336, 0, ... 03403 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03404 1744 NtContinue (1244336, 0, ... 03405 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03406 1744 NtContinue (1244336, 0, ... 03407 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03408 1744 NtContinue (1244336, 0, ... 03409 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03410 1744 NtContinue (1244336, 0, ... 03411 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03412 1744 NtContinue (1244336, 0, ... 03413 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03414 1744 NtContinue (1244336, 0, ... 03415 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03416 1744 NtContinue (1244336, 0, ... 03417 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03418 1744 NtContinue (1244336, 0, ... 03419 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03420 1744 NtContinue (1244336, 0, ... 03421 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03422 1744 NtContinue (1244336, 0, ... 03423 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03424 1744 NtContinue (1244336, 0, ... 03425 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03426 1744 NtContinue (1244336, 0, ... 03427 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03428 1744 NtContinue (1244336, 0, ... 03429 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03430 1744 NtContinue (1244336, 0, ... 03431 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03432 1744 NtContinue (1244336, 0, ... 03433 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03434 1744 NtContinue (1244336, 0, ... 03435 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03436 1744 NtContinue (1244336, 0, ... 03437 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03438 1744 NtContinue (1244336, 0, ... 03439 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03440 1744 NtContinue (1244336, 0, ... 03441 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03442 1744 NtContinue (1244336, 0, ... 03443 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03444 1744 NtContinue (1244336, 0, ... 03445 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03446 1744 NtContinue (1244336, 0, ... 03447 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03448 1744 NtContinue (1244336, 0, ... 03449 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03450 1744 NtContinue (1244336, 0, ... 03451 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03452 1744 NtContinue (1244336, 0, ... 03453 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03454 1744 NtContinue (1244336, 0, ... 03455 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03456 1744 NtContinue (1244336, 0, ... 03457 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03458 1744 NtContinue (1244336, 0, ... 03459 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03460 1744 NtContinue (1244336, 0, ... 03461 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03462 1744 NtContinue (1244336, 0, ... 03463 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03464 1744 NtContinue (1244336, 0, ... 03465 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03466 1744 NtContinue (1244336, 0, ... 03467 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03468 1744 NtContinue (1244336, 0, ... 03469 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03470 1744 NtContinue (1244336, 0, ... 03471 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03472 1744 NtContinue (1244336, 0, ... 03473 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03474 1744 NtContinue (1244336, 0, ... 03475 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03476 1744 NtContinue (1244336, 0, ... 03477 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03478 1744 NtContinue (1244336, 0, ... 03479 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03480 1744 NtContinue (1244336, 0, ... 03481 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03482 1744 NtContinue (1244336, 0, ... 03483 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03484 1744 NtContinue (1244336, 0, ... 03485 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03486 1744 NtContinue (1244336, 0, ... 03487 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03488 1744 NtContinue (1244336, 0, ... 03489 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03490 1744 NtContinue (1244336, 0, ... 03491 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03492 1744 NtContinue (1244336, 0, ... 03493 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03494 1744 NtContinue (1244336, 0, ... 03495 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03496 1744 NtContinue (1244336, 0, ... 03497 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03498 1744 NtContinue (1244336, 0, ... 03499 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03500 1744 NtContinue (1244336, 0, ... 03501 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03502 1744 NtContinue (1244336, 0, ... 03503 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03504 1744 NtContinue (1244336, 0, ... 03505 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03506 1744 NtContinue (1244336, 0, ... 03507 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03508 1744 NtContinue (1244336, 0, ... 03509 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03510 1744 NtContinue (1244336, 0, ... 03511 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03512 1744 NtContinue (1244336, 0, ... 03513 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03514 1744 NtContinue (1244336, 0, ... 03515 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03516 1744 NtContinue (1244336, 0, ... 03517 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03518 1744 NtContinue (1244336, 0, ... 03519 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03520 1744 NtContinue (1244336, 0, ... 03521 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03522 1744 NtContinue (1244336, 0, ... 03523 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03524 1744 NtContinue (1244336, 0, ... 03525 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03526 1744 NtContinue (1244336, 0, ... 03527 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03528 1744 NtContinue (1244336, 0, ... 03529 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03530 1744 NtContinue (1244336, 0, ... 03531 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03532 1744 NtContinue (1244336, 0, ... 03533 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03534 1744 NtContinue (1244336, 0, ... 03535 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03536 1744 NtContinue (1244336, 0, ... 03537 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03538 1744 NtContinue (1244336, 0, ... 03539 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03540 1744 NtContinue (1244336, 0, ... 03541 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03542 1744 NtContinue (1244336, 0, ... 03543 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03544 1744 NtContinue (1244336, 0, ... 03545 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03546 1744 NtContinue (1244336, 0, ... 03547 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03548 1744 NtContinue (1244336, 0, ... 03549 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03550 1744 NtContinue (1244336, 0, ... 03551 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03552 1744 NtContinue (1244336, 0, ... 03553 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03554 1744 NtContinue (1244336, 0, ... 03555 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03556 1744 NtContinue (1244336, 0, ... 03557 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03558 1744 NtContinue (1244336, 0, ... 03559 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03560 1744 NtContinue (1244336, 0, ... 03561 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03562 1744 NtContinue (1244336, 0, ... 03563 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03564 1744 NtContinue (1244336, 0, ... 03565 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03566 1744 NtContinue (1244336, 0, ... 03567 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03568 1744 NtContinue (1244336, 0, ... 03569 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03570 1744 NtContinue (1244336, 0, ... 03571 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03572 1744 NtContinue (1244336, 0, ... 03573 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03574 1744 NtContinue (1244336, 0, ... 03575 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03576 1744 NtContinue (1244336, 0, ... 03577 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03578 1744 NtContinue (1244336, 0, ... 03579 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03580 1744 NtContinue (1244336, 0, ... 03581 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03582 1744 NtContinue (1244336, 0, ... 03583 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03584 1744 NtContinue (1244336, 0, ... 03585 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03586 1744 NtContinue (1244336, 0, ... 03587 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03588 1744 NtContinue (1244336, 0, ... 03589 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03590 1744 NtContinue (1244336, 0, ... 03591 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03592 1744 NtContinue (1244336, 0, ... 03593 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03594 1744 NtContinue (1244336, 0, ... 03595 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03596 1744 NtContinue (1244336, 0, ... 03597 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03598 1744 NtContinue (1244336, 0, ... 03599 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03600 1744 NtContinue (1244336, 0, ... 03601 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03602 1744 NtContinue (1244336, 0, ... 03603 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03604 1744 NtContinue (1244336, 0, ... 03605 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03606 1744 NtContinue (1244336, 0, ... 03607 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03608 1744 NtContinue (1244336, 0, ... 03609 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03610 1744 NtContinue (1244336, 0, ... 03611 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03612 1744 NtContinue (1244336, 0, ... 03613 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03614 1744 NtContinue (1244336, 0, ... 03615 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03616 1744 NtContinue (1244336, 0, ... 03617 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03618 1744 NtContinue (1244336, 0, ... 03619 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03620 1744 NtContinue (1244336, 0, ... 03621 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03622 1744 NtContinue (1244336, 0, ... 03623 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03624 1744 NtContinue (1244336, 0, ... 03625 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03626 1744 NtContinue (1244336, 0, ... 03627 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03628 1744 NtContinue (1244336, 0, ... 03629 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03630 1744 NtContinue (1244336, 0, ... 03631 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03632 1744 NtContinue (1244336, 0, ... 03633 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03634 1744 NtContinue (1244336, 0, ... 03635 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03636 1744 NtContinue (1244336, 0, ... 03637 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03638 1744 NtContinue (1244336, 0, ... 03639 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03640 1744 NtContinue (1244336, 0, ... 03641 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03642 1744 NtContinue (1244336, 0, ... 03643 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03644 1744 NtContinue (1244336, 0, ... 03645 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03646 1744 NtContinue (1244336, 0, ... 03647 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03648 1744 NtContinue (1244336, 0, ... 03649 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03650 1744 NtContinue (1244336, 0, ... 03651 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03652 1744 NtContinue (1244336, 0, ... 03653 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03654 1744 NtContinue (1244336, 0, ... 03655 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03656 1744 NtContinue (1244336, 0, ... 03657 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03658 1744 NtContinue (1244336, 0, ... 03659 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03660 1744 NtContinue (1244336, 0, ... 03661 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03662 1744 NtContinue (1244336, 0, ... 03663 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03664 1744 NtContinue (1244336, 0, ... 03665 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03666 1744 NtContinue (1244336, 0, ... 03667 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03668 1744 NtContinue (1244336, 0, ... 03669 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03670 1744 NtContinue (1244336, 0, ... 03671 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03672 1744 NtContinue (1244336, 0, ... 03673 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03674 1744 NtContinue (1244336, 0, ... 03675 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03676 1744 NtContinue (1244336, 0, ... 03677 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03678 1744 NtContinue (1244336, 0, ... 03679 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03680 1744 NtContinue (1244336, 0, ... 03681 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03682 1744 NtContinue (1244336, 0, ... 03683 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03684 1744 NtContinue (1244336, 0, ... 03685 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03686 1744 NtContinue (1244336, 0, ... 03687 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03688 1744 NtContinue (1244336, 0, ... 03689 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03690 1744 NtContinue (1244336, 0, ... 03691 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03692 1744 NtContinue (1244336, 0, ... 03693 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03694 1744 NtContinue (1244336, 0, ... 03695 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03696 1744 NtContinue (1244336, 0, ... 03697 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03698 1744 NtContinue (1244336, 0, ... 03699 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03700 1744 NtContinue (1244336, 0, ... 03701 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03702 1744 NtContinue (1244336, 0, ... 03703 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03704 1744 NtContinue (1244336, 0, ... 03705 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03706 1744 NtContinue (1244336, 0, ... 03707 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03708 1744 NtContinue (1244336, 0, ... 03709 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03710 1744 NtContinue (1244336, 0, ... 03711 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03712 1744 NtContinue (1244336, 0, ... 03713 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03714 1744 NtContinue (1244336, 0, ... 03715 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03716 1744 NtContinue (1244336, 0, ... 03717 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03718 1744 NtContinue (1244336, 0, ... 03719 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03720 1744 NtContinue (1244336, 0, ... 03721 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03722 1744 NtContinue (1244336, 0, ... 03723 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03724 1744 NtContinue (1244336, 0, ... 03725 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03726 1744 NtContinue (1244336, 0, ... 03727 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03728 1744 NtContinue (1244336, 0, ... 03729 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03730 1744 NtContinue (1244336, 0, ... 03731 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03732 1744 NtContinue (1244336, 0, ... 03733 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03734 1744 NtContinue (1244336, 0, ... 03735 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03736 1744 NtContinue (1244336, 0, ... 03737 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03738 1744 NtContinue (1244336, 0, ... 03739 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03740 1744 NtContinue (1244336, 0, ... 03741 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03742 1744 NtContinue (1244336, 0, ... 03743 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03744 1744 NtContinue (1244336, 0, ... 03745 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03746 1744 NtContinue (1244336, 0, ... 03747 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03748 1744 NtContinue (1244336, 0, ... 03749 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03750 1744 NtContinue (1244336, 0, ... 03751 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03752 1744 NtContinue (1244336, 0, ... 03753 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03754 1744 NtContinue (1244336, 0, ... 03755 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03756 1744 NtContinue (1244336, 0, ... 03757 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03758 1744 NtContinue (1244336, 0, ... 03759 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03760 1744 NtContinue (1244336, 0, ... 03761 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03762 1744 NtContinue (1244336, 0, ... 03763 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03764 1744 NtContinue (1244336, 0, ... 03765 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03766 1744 NtContinue (1244336, 0, ... 03767 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03768 1744 NtContinue (1244336, 0, ... 03769 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03770 1744 NtContinue (1244336, 0, ... 03771 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03772 1744 NtContinue (1244336, 0, ... 03773 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03774 1744 NtContinue (1244336, 0, ... 03775 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03776 1744 NtContinue (1244336, 0, ... 03777 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03778 1744 NtContinue (1244336, 0, ... 03779 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03780 1744 NtContinue (1244336, 0, ... 03781 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03782 1744 NtContinue (1244336, 0, ... 03783 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03784 1744 NtContinue (1244336, 0, ... 03785 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03786 1744 NtContinue (1244336, 0, ... 03787 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03788 1744 NtContinue (1244336, 0, ... 03789 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03790 1744 NtContinue (1244336, 0, ... 03791 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03792 1744 NtContinue (1244336, 0, ... 03793 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03794 1744 NtContinue (1244336, 0, ... 03795 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03796 1744 NtContinue (1244336, 0, ... 03797 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03798 1744 NtContinue (1244336, 0, ... 03799 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03800 1744 NtContinue (1244336, 0, ... 03801 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03802 1744 NtContinue (1244336, 0, ... 03803 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03804 1744 NtContinue (1244336, 0, ... 03805 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03806 1744 NtContinue (1244336, 0, ... 03807 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03808 1744 NtContinue (1244336, 0, ... 03809 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03810 1744 NtContinue (1244336, 0, ... 03811 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03812 1744 NtContinue (1244336, 0, ... 03813 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03814 1744 NtContinue (1244336, 0, ... 03815 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03816 1744 NtContinue (1244336, 0, ... 03817 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03818 1744 NtContinue (1244336, 0, ... 03819 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03820 1744 NtContinue (1244336, 0, ... 03821 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03822 1744 NtContinue (1244336, 0, ... 03823 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03824 1744 NtContinue (1244336, 0, ... 03825 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03826 1744 NtContinue (1244336, 0, ... 03827 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03828 1744 NtContinue (1244336, 0, ... 03829 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03830 1744 NtContinue (1244336, 0, ... 03831 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03832 1744 NtContinue (1244336, 0, ... 03833 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03834 1744 NtContinue (1244336, 0, ... 03835 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03836 1744 NtContinue (1244336, 0, ... 03837 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03838 1744 NtContinue (1244336, 0, ... 03839 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03840 1744 NtContinue (1244336, 0, ... 03841 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03842 1744 NtContinue (1244336, 0, ... 03843 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03844 1744 NtContinue (1244336, 0, ... 03845 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03846 1744 NtContinue (1244336, 0, ... 03847 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03848 1744 NtContinue (1244336, 0, ... 03849 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03850 1744 NtContinue (1244336, 0, ... 03851 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03852 1744 NtContinue (1244336, 0, ... 03853 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03854 1744 NtContinue (1244336, 0, ... 03855 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03856 1744 NtContinue (1244336, 0, ... 03857 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03858 1744 NtContinue (1244336, 0, ... 03859 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03860 1744 NtContinue (1244336, 0, ... 03861 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03862 1744 NtContinue (1244336, 0, ... 03863 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03864 1744 NtContinue (1244336, 0, ... 03865 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03866 1744 NtContinue (1244336, 0, ... 03867 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03868 1744 NtContinue (1244336, 0, ... 03869 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03870 1744 NtContinue (1244336, 0, ... 03871 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03872 1744 NtContinue (1244336, 0, ... 03873 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03874 1744 NtContinue (1244336, 0, ... 03875 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03876 1744 NtContinue (1244336, 0, ... 03877 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03878 1744 NtContinue (1244336, 0, ... 03879 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03880 1744 NtContinue (1244336, 0, ... 03881 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03882 1744 NtContinue (1244336, 0, ... 03883 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03884 1744 NtContinue (1244336, 0, ... 03885 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03886 1744 NtContinue (1244336, 0, ... 03887 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03888 1744 NtContinue (1244336, 0, ... 03889 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03890 1744 NtContinue (1244336, 0, ... 03891 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03892 1744 NtContinue (1244336, 0, ... 03893 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03894 1744 NtContinue (1244336, 0, ... 03895 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03896 1744 NtContinue (1244336, 0, ... 03897 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03898 1744 NtContinue (1244336, 0, ... 03899 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03900 1744 NtContinue (1244336, 0, ... 03901 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03902 1744 NtContinue (1244336, 0, ... 03903 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03904 1744 NtContinue (1244336, 0, ... 03905 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03906 1744 NtContinue (1244336, 0, ... 03907 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03908 1744 NtContinue (1244336, 0, ... 03909 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03910 1744 NtContinue (1244336, 0, ... 03911 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03912 1744 NtContinue (1244336, 0, ... 03913 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03914 1744 NtContinue (1244336, 0, ... 03915 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03916 1744 NtContinue (1244336, 0, ... 03917 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03918 1744 NtContinue (1244336, 0, ... 03919 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03920 1744 NtContinue (1244336, 0, ... 03921 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03922 1744 NtContinue (1244336, 0, ... 03923 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03924 1744 NtContinue (1244336, 0, ... 03925 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03926 1744 NtContinue (1244336, 0, ... 03927 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03928 1744 NtContinue (1244336, 0, ... 03929 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03930 1744 NtContinue (1244336, 0, ... 03931 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03932 1744 NtContinue (1244336, 0, ... 03933 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03934 1744 NtContinue (1244336, 0, ... 03935 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03936 1744 NtContinue (1244336, 0, ... 03937 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03938 1744 NtContinue (1244336, 0, ... 03939 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03940 1744 NtContinue (1244336, 0, ... 03941 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03942 1744 NtContinue (1244336, 0, ... 03943 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03944 1744 NtContinue (1244336, 0, ... 03945 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03946 1744 NtContinue (1244336, 0, ... 03947 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03948 1744 NtContinue (1244336, 0, ... 03949 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03950 1744 NtContinue (1244336, 0, ... 03951 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03952 1744 NtContinue (1244336, 0, ... 03953 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03954 1744 NtContinue (1244336, 0, ... 03955 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03956 1744 NtContinue (1244336, 0, ... 03957 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03958 1744 NtContinue (1244336, 0, ... 03959 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03960 1744 NtContinue (1244336, 0, ... 03961 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03962 1744 NtContinue (1244336, 0, ... 03963 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03964 1744 NtContinue (1244336, 0, ... 03965 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03966 1744 NtContinue (1244336, 0, ... 03967 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03968 1744 NtContinue (1244336, 0, ... 03969 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03970 1744 NtContinue (1244336, 0, ... 03971 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03972 1744 NtContinue (1244336, 0, ... 03973 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03974 1744 NtContinue (1244336, 0, ... 03975 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03976 1744 NtContinue (1244336, 0, ... 03977 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03978 1744 NtContinue (1244336, 0, ... 03979 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03980 1744 NtContinue (1244336, 0, ... 03981 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03982 1744 NtContinue (1244336, 0, ... 03983 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03984 1744 NtContinue (1244336, 0, ... 03985 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03986 1744 NtContinue (1244336, 0, ... 03987 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03988 1744 NtContinue (1244336, 0, ... 03989 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03990 1744 NtContinue (1244336, 0, ... 03991 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03992 1744 NtContinue (1244336, 0, ... 03993 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03994 1744 NtContinue (1244336, 0, ... 03995 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03996 1744 NtContinue (1244336, 0, ... 03997 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03998 1744 NtContinue (1244336, 0, ... 03999 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04000 1744 NtContinue (1244336, 0, ... 04001 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04002 1744 NtContinue (1244336, 0, ... 04003 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04004 1744 NtContinue (1244336, 0, ... 04005 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04006 1744 NtContinue (1244336, 0, ... 04007 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04008 1744 NtContinue (1244336, 0, ... 04009 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04010 1744 NtContinue (1244336, 0, ... 04011 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04012 1744 NtContinue (1244336, 0, ... 04013 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04014 1744 NtContinue (1244336, 0, ... 04015 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04016 1744 NtContinue (1244336, 0, ... 04017 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04018 1744 NtContinue (1244336, 0, ... 04019 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04020 1744 NtContinue (1244336, 0, ... 04021 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04022 1744 NtContinue (1244336, 0, ... 04023 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04024 1744 NtContinue (1244336, 0, ... 04025 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04026 1744 NtContinue (1244336, 0, ... 04027 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04028 1744 NtContinue (1244336, 0, ... 04029 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04030 1744 NtContinue (1244336, 0, ... 04031 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04032 1744 NtContinue (1244336, 0, ... 04033 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04034 1744 NtContinue (1244336, 0, ... 04035 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04036 1744 NtContinue (1244336, 0, ... 04037 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04038 1744 NtContinue (1244336, 0, ... 04039 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04040 1744 NtContinue (1244336, 0, ... 04041 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04042 1744 NtContinue (1244336, 0, ... 04043 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04044 1744 NtContinue (1244336, 0, ... 04045 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04046 1744 NtContinue (1244336, 0, ... 04047 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04048 1744 NtContinue (1244336, 0, ... 04049 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04050 1744 NtContinue (1244336, 0, ... 04051 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04052 1744 NtContinue (1244336, 0, ... 04053 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04054 1744 NtContinue (1244336, 0, ... 04055 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04056 1744 NtContinue (1244336, 0, ... 04057 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04058 1744 NtContinue (1244336, 0, ... 04059 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04060 1744 NtContinue (1244336, 0, ... 04061 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04062 1744 NtContinue (1244336, 0, ... 04063 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04064 1744 NtContinue (1244336, 0, ... 04065 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04066 1744 NtContinue (1244336, 0, ... 04067 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04068 1744 NtContinue (1244336, 0, ... 04069 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04070 1744 NtContinue (1244336, 0, ... 04071 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04072 1744 NtContinue (1244336, 0, ... 04073 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04074 1744 NtContinue (1244336, 0, ... 04075 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04076 1744 NtContinue (1244336, 0, ... 04077 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04078 1744 NtContinue (1244336, 0, ... 04079 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04080 1744 NtContinue (1244336, 0, ... 04081 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04082 1744 NtContinue (1244336, 0, ... 04083 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04084 1744 NtContinue (1244336, 0, ... 04085 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04086 1744 NtContinue (1244336, 0, ... 04087 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04088 1744 NtContinue (1244336, 0, ... 04089 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04090 1744 NtContinue (1244336, 0, ... 04091 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04092 1744 NtContinue (1244336, 0, ... 04093 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04094 1744 NtContinue (1244336, 0, ... 04095 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04096 1744 NtContinue (1244336, 0, ... 04097 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04098 1744 NtContinue (1244336, 0, ... 04099 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04100 1744 NtContinue (1244336, 0, ... 04101 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04102 1744 NtContinue (1244336, 0, ... 04103 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04104 1744 NtContinue (1244336, 0, ... 04105 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04106 1744 NtContinue (1244336, 0, ... 04107 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04108 1744 NtContinue (1244336, 0, ... 04109 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04110 1744 NtContinue (1244336, 0, ... 04111 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04112 1744 NtContinue (1244336, 0, ... 04113 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04114 1744 NtContinue (1244336, 0, ... 04115 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04116 1744 NtContinue (1244336, 0, ... 04117 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04118 1744 NtContinue (1244336, 0, ... 04119 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04120 1744 NtContinue (1244336, 0, ... 04121 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04122 1744 NtContinue (1244336, 0, ... 04123 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04124 1744 NtContinue (1244336, 0, ... 04125 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04126 1744 NtContinue (1244336, 0, ... 04127 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04128 1744 NtContinue (1244336, 0, ... 04129 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04130 1744 NtContinue (1244336, 0, ... 04131 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04132 1744 NtContinue (1244336, 0, ... 04133 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04134 1744 NtContinue (1244336, 0, ... 04135 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04136 1744 NtContinue (1244336, 0, ... 04137 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04138 1744 NtContinue (1244336, 0, ... 04139 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04140 1744 NtContinue (1244336, 0, ... 04141 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04142 1744 NtContinue (1244336, 0, ... 04143 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04144 1744 NtContinue (1244336, 0, ... 04145 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04146 1744 NtContinue (1244336, 0, ... 04147 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04148 1744 NtContinue (1244336, 0, ... 04149 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04150 1744 NtContinue (1244336, 0, ... 04151 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04152 1744 NtContinue (1244336, 0, ... 04153 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04154 1744 NtContinue (1244336, 0, ... 04155 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04156 1744 NtContinue (1244336, 0, ... 04157 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04158 1744 NtContinue (1244336, 0, ... 04159 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04160 1744 NtContinue (1244336, 0, ... 04161 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04162 1744 NtContinue (1244336, 0, ... 04163 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04164 1744 NtContinue (1244336, 0, ... 04165 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04166 1744 NtContinue (1244336, 0, ... 04167 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04168 1744 NtContinue (1244336, 0, ... 04169 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04170 1744 NtContinue (1244336, 0, ... 04171 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04172 1744 NtContinue (1244336, 0, ... 04173 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04174 1744 NtContinue (1244336, 0, ... 04175 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04176 1744 NtContinue (1244336, 0, ... 04177 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04178 1744 NtContinue (1244336, 0, ... 04179 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04180 1744 NtContinue (1244336, 0, ... 04181 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04182 1744 NtContinue (1244336, 0, ... 04183 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04184 1744 NtContinue (1244336, 0, ... 04185 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04186 1744 NtContinue (1244336, 0, ... 04187 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04188 1744 NtContinue (1244336, 0, ... 04189 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04190 1744 NtContinue (1244336, 0, ... 04191 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04192 1744 NtContinue (1244336, 0, ... 04193 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04194 1744 NtContinue (1244336, 0, ... 04195 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04196 1744 NtContinue (1244336, 0, ... 04197 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04198 1744 NtContinue (1244336, 0, ... 04199 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04200 1744 NtContinue (1244336, 0, ... 04201 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04202 1744 NtContinue (1244336, 0, ... 04203 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04204 1744 NtContinue (1244336, 0, ... 04205 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04206 1744 NtContinue (1244336, 0, ... 04207 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04208 1744 NtContinue (1244336, 0, ... 04209 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04210 1744 NtContinue (1244336, 0, ... 04211 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04212 1744 NtContinue (1244336, 0, ... 04213 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04214 1744 NtContinue (1244336, 0, ... 04215 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04216 1744 NtContinue (1244336, 0, ... 04217 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04218 1744 NtContinue (1244336, 0, ... 04219 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04220 1744 NtContinue (1244336, 0, ... 04221 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04222 1744 NtContinue (1244336, 0, ... 04223 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04224 1744 NtContinue (1244336, 0, ... 04225 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04226 1744 NtContinue (1244336, 0, ... 04227 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04228 1744 NtContinue (1244336, 0, ... 04229 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04230 1744 NtContinue (1244336, 0, ... 04231 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04232 1744 NtContinue (1244336, 0, ... 04233 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04234 1744 NtContinue (1244336, 0, ... 04235 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04236 1744 NtContinue (1244336, 0, ... 04237 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04238 1744 NtContinue (1244336, 0, ... 04239 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04240 1744 NtContinue (1244336, 0, ... 04241 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04242 1744 NtContinue (1244336, 0, ... 04243 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04244 1744 NtContinue (1244336, 0, ... 04245 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04246 1744 NtContinue (1244336, 0, ... 04247 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04248 1744 NtContinue (1244336, 0, ... 04249 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04250 1744 NtContinue (1244336, 0, ... 04251 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04252 1744 NtContinue (1244336, 0, ... 04253 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04254 1744 NtContinue (1244336, 0, ... 04255 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04256 1744 NtContinue (1244336, 0, ... 04257 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04258 1744 NtContinue (1244336, 0, ... 04259 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04260 1744 NtContinue (1244336, 0, ... 04261 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04262 1744 NtContinue (1244336, 0, ... 04263 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04264 1744 NtContinue (1244336, 0, ... 04265 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04266 1744 NtContinue (1244336, 0, ... 04267 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04268 1744 NtContinue (1244336, 0, ... 04269 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04270 1744 NtContinue (1244336, 0, ... 04271 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04272 1744 NtContinue (1244336, 0, ... 04273 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04274 1744 NtContinue (1244336, 0, ... 04275 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04276 1744 NtContinue (1244336, 0, ... 04277 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04278 1744 NtContinue (1244336, 0, ... 04279 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04280 1744 NtContinue (1244336, 0, ... 04281 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04282 1744 NtContinue (1244336, 0, ... 04283 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04284 1744 NtContinue (1244336, 0, ... 04285 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04286 1744 NtContinue (1244336, 0, ... 04287 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04288 1744 NtContinue (1244336, 0, ... 04289 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04290 1744 NtContinue (1244336, 0, ... 04291 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04292 1744 NtContinue (1244336, 0, ... 04293 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04294 1744 NtContinue (1244336, 0, ... 04295 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04296 1744 NtContinue (1244336, 0, ... 04297 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04298 1744 NtContinue (1244336, 0, ... 04299 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04300 1744 NtContinue (1244336, 0, ... 04301 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04302 1744 NtContinue (1244336, 0, ... 04303 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04304 1744 NtContinue (1244336, 0, ... 04305 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04306 1744 NtContinue (1244336, 0, ... 04307 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04308 1744 NtContinue (1244336, 0, ... 04309 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04310 1744 NtContinue (1244336, 0, ... 04311 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04312 1744 NtContinue (1244336, 0, ... 04313 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04314 1744 NtContinue (1244336, 0, ... 04315 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04316 1744 NtContinue (1244336, 0, ... 04317 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04318 1744 NtContinue (1244336, 0, ... 04319 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04320 1744 NtContinue (1244336, 0, ... 04321 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04322 1744 NtContinue (1244336, 0, ... 04323 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04324 1744 NtContinue (1244336, 0, ... 04325 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04326 1744 NtContinue (1244336, 0, ... 04327 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04328 1744 NtContinue (1244336, 0, ... 04329 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04330 1744 NtContinue (1244336, 0, ... 04331 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04332 1744 NtContinue (1244336, 0, ... 04333 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04334 1744 NtContinue (1244336, 0, ... 04335 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04336 1744 NtContinue (1244336, 0, ... 04337 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04338 1744 NtContinue (1244336, 0, ... 04339 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04340 1744 NtContinue (1244336, 0, ... 04341 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04342 1744 NtContinue (1244336, 0, ... 04343 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04344 1744 NtContinue (1244336, 0, ... 04345 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04346 1744 NtContinue (1244336, 0, ... 04347 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04348 1744 NtContinue (1244336, 0, ... 04349 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04350 1744 NtContinue (1244336, 0, ... 04351 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04352 1744 NtContinue (1244336, 0, ... 04353 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04354 1744 NtContinue (1244336, 0, ... 04355 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04356 1744 NtContinue (1244336, 0, ... 04357 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04358 1744 NtContinue (1244336, 0, ... 04359 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04360 1744 NtContinue (1244336, 0, ... 04361 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04362 1744 NtContinue (1244336, 0, ... 04363 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04364 1744 NtContinue (1244336, 0, ... 04365 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04366 1744 NtContinue (1244336, 0, ... 04367 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04368 1744 NtContinue (1244336, 0, ... 04369 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04370 1744 NtContinue (1244336, 0, ... 04371 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04372 1744 NtContinue (1244336, 0, ... 04373 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04374 1744 NtContinue (1244336, 0, ... 04375 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04376 1744 NtContinue (1244336, 0, ... 04377 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04378 1744 NtContinue (1244336, 0, ... 04379 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04380 1744 NtContinue (1244336, 0, ... 04381 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04382 1744 NtContinue (1244336, 0, ... 04383 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04384 1744 NtContinue (1244336, 0, ... 04385 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04386 1744 NtContinue (1244336, 0, ... 04387 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04388 1744 NtContinue (1244336, 0, ... 04389 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04390 1744 NtContinue (1244336, 0, ... 04391 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04392 1744 NtContinue (1244336, 0, ... 04393 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04394 1744 NtContinue (1244336, 0, ... 04395 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04396 1744 NtContinue (1244336, 0, ... 04397 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04398 1744 NtContinue (1244336, 0, ... 04399 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04400 1744 NtContinue (1244336, 0, ... 04401 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04402 1744 NtContinue (1244336, 0, ... 04403 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04404 1744 NtContinue (1244336, 0, ... 04405 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04406 1744 NtContinue (1244336, 0, ... 04407 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04408 1744 NtContinue (1244336, 0, ... 04409 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04410 1744 NtContinue (1244336, 0, ... 04411 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04412 1744 NtContinue (1244336, 0, ... 04413 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04414 1744 NtContinue (1244336, 0, ... 04415 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04416 1744 NtContinue (1244336, 0, ... 04417 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04418 1744 NtContinue (1244336, 0, ... 04419 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04420 1744 NtContinue (1244336, 0, ... 04421 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04422 1744 NtContinue (1244336, 0, ... 04423 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04424 1744 NtContinue (1244336, 0, ... 04425 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04426 1744 NtContinue (1244336, 0, ... 04427 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04428 1744 NtContinue (1244336, 0, ... 04429 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04430 1744 NtContinue (1244336, 0, ... 04431 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04432 1744 NtContinue (1244336, 0, ... 04433 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04434 1744 NtContinue (1244336, 0, ... 04435 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04436 1744 NtContinue (1244336, 0, ... 04437 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04438 1744 NtContinue (1244336, 0, ... 04439 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04440 1744 NtContinue (1244336, 0, ... 04441 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04442 1744 NtContinue (1244336, 0, ... 04443 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04444 1744 NtContinue (1244336, 0, ... 04445 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04446 1744 NtContinue (1244336, 0, ... 04447 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04448 1744 NtContinue (1244336, 0, ... 04449 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04450 1744 NtContinue (1244336, 0, ... 04451 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04452 1744 NtContinue (1244336, 0, ... 04453 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04454 1744 NtContinue (1244336, 0, ... 04455 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04456 1744 NtContinue (1244336, 0, ... 04457 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04458 1744 NtContinue (1244336, 0, ... 04459 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04460 1744 NtContinue (1244336, 0, ... 04461 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04462 1744 NtContinue (1244336, 0, ... 04463 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04464 1744 NtContinue (1244336, 0, ... 04465 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04466 1744 NtContinue (1244336, 0, ... 04467 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04468 1744 NtContinue (1244336, 0, ... 04469 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04470 1744 NtContinue (1244336, 0, ... 04471 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04472 1744 NtContinue (1244336, 0, ... 04473 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04474 1744 NtContinue (1244336, 0, ... 04475 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04476 1744 NtContinue (1244336, 0, ... 04477 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04478 1744 NtContinue (1244336, 0, ... 04479 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04480 1744 NtContinue (1244336, 0, ... 04481 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04482 1744 NtContinue (1244336, 0, ... 04483 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04484 1744 NtContinue (1244336, 0, ... 04485 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04486 1744 NtContinue (1244336, 0, ... 04487 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04488 1744 NtContinue (1244336, 0, ... 04489 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04490 1744 NtContinue (1244336, 0, ... 04491 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04492 1744 NtContinue (1244336, 0, ... 04493 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04494 1744 NtContinue (1244336, 0, ... 04495 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04496 1744 NtContinue (1244336, 0, ... 04497 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04498 1744 NtContinue (1244336, 0, ... 04499 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04500 1744 NtContinue (1244336, 0, ... 04501 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04502 1744 NtContinue (1244336, 0, ... 04503 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04504 1744 NtContinue (1244336, 0, ... 04505 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04506 1744 NtContinue (1244336, 0, ... 04507 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04508 1744 NtContinue (1244336, 0, ... 04509 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04510 1744 NtContinue (1244336, 0, ... 04511 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04512 1744 NtContinue (1244336, 0, ... 04513 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04514 1744 NtContinue (1244336, 0, ... 04515 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04516 1744 NtContinue (1244336, 0, ... 04517 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04518 1744 NtContinue (1244336, 0, ... 04519 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04520 1744 NtContinue (1244336, 0, ... 04521 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04522 1744 NtContinue (1244336, 0, ... 04523 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04524 1744 NtContinue (1244336, 0, ... 04525 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04526 1744 NtContinue (1244336, 0, ... 04527 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04528 1744 NtContinue (1244336, 0, ... 04529 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04530 1744 NtContinue (1244336, 0, ... 04531 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04532 1744 NtContinue (1244336, 0, ... 04533 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04534 1744 NtContinue (1244336, 0, ... 04535 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04536 1744 NtContinue (1244336, 0, ... 04537 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04538 1744 NtContinue (1244336, 0, ... 04539 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04540 1744 NtContinue (1244336, 0, ... 04541 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04542 1744 NtContinue (1244336, 0, ... 04543 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04544 1744 NtContinue (1244336, 0, ... 04545 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04546 1744 NtContinue (1244336, 0, ... 04547 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04548 1744 NtContinue (1244336, 0, ... 04549 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04550 1744 NtContinue (1244336, 0, ... 04551 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04552 1744 NtContinue (1244336, 0, ... 04553 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04554 1744 NtContinue (1244336, 0, ... 04555 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04556 1744 NtContinue (1244336, 0, ... 04557 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04558 1744 NtContinue (1244336, 0, ... 04559 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04560 1744 NtContinue (1244336, 0, ... 04561 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04562 1744 NtContinue (1244336, 0, ... 04563 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04564 1744 NtContinue (1244336, 0, ... 04565 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04566 1744 NtContinue (1244336, 0, ... 04567 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04568 1744 NtContinue (1244336, 0, ... 04569 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04570 1744 NtContinue (1244336, 0, ... 04571 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04572 1744 NtContinue (1244336, 0, ... 04573 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04574 1744 NtContinue (1244336, 0, ... 04575 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04576 1744 NtContinue (1244336, 0, ... 04577 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04578 1744 NtContinue (1244336, 0, ... 04579 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04580 1744 NtContinue (1244336, 0, ... 04581 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04582 1744 NtContinue (1244336, 0, ... 04583 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04584 1744 NtContinue (1244336, 0, ... 04585 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04586 1744 NtContinue (1244336, 0, ... 04587 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04588 1744 NtContinue (1244336, 0, ... 04589 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04590 1744 NtContinue (1244336, 0, ... 04591 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04592 1744 NtContinue (1244336, 0, ... 04593 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04594 1744 NtContinue (1244336, 0, ... 04595 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04596 1744 NtContinue (1244336, 0, ... 04597 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04598 1744 NtContinue (1244336, 0, ... 04599 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04600 1744 NtContinue (1244336, 0, ... 04601 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04602 1744 NtContinue (1244336, 0, ... 04603 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04604 1744 NtContinue (1244336, 0, ... 04605 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04606 1744 NtContinue (1244336, 0, ... 04607 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04608 1744 NtContinue (1244336, 0, ... 04609 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04610 1744 NtContinue (1244336, 0, ... 04611 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04612 1744 NtContinue (1244336, 0, ... 04613 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04614 1744 NtContinue (1244336, 0, ... 04615 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04616 1744 NtContinue (1244336, 0, ... 04617 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04618 1744 NtContinue (1244336, 0, ... 04619 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04620 1744 NtContinue (1244336, 0, ... 04621 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04622 1744 NtContinue (1244336, 0, ... 04623 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04624 1744 NtContinue (1244336, 0, ... 04625 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04626 1744 NtContinue (1244336, 0, ... 04627 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04628 1744 NtContinue (1244336, 0, ... 04629 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04630 1744 NtContinue (1244336, 0, ... 04631 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04632 1744 NtContinue (1244336, 0, ... 04633 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04634 1744 NtContinue (1244336, 0, ... 04635 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04636 1744 NtContinue (1244336, 0, ... 04637 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04638 1744 NtContinue (1244336, 0, ... 04639 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04640 1744 NtContinue (1244336, 0, ... 04641 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04642 1744 NtContinue (1244336, 0, ... 04643 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04644 1744 NtContinue (1244336, 0, ... 04645 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04646 1744 NtContinue (1244336, 0, ... 04647 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04648 1744 NtContinue (1244336, 0, ... 04649 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04650 1744 NtContinue (1244336, 0, ... 04651 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04652 1744 NtContinue (1244336, 0, ... 04653 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04654 1744 NtContinue (1244336, 0, ... 04655 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04656 1744 NtContinue (1244336, 0, ... 04657 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04658 1744 NtContinue (1244336, 0, ... 04659 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04660 1744 NtContinue (1244336, 0, ... 04661 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04662 1744 NtContinue (1244336, 0, ... 04663 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04664 1744 NtContinue (1244336, 0, ... 04665 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04666 1744 NtContinue (1244336, 0, ... 04667 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04668 1744 NtContinue (1244336, 0, ... 04669 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04670 1744 NtContinue (1244336, 0, ... 04671 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04672 1744 NtContinue (1244336, 0, ... 04673 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04674 1744 NtContinue (1244336, 0, ... 04675 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04676 1744 NtContinue (1244336, 0, ... 04677 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04678 1744 NtContinue (1244336, 0, ... 04679 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04680 1744 NtContinue (1244336, 0, ... 04681 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04682 1744 NtContinue (1244336, 0, ... 04683 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04684 1744 NtContinue (1244336, 0, ... 04685 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04686 1744 NtContinue (1244336, 0, ... 04687 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04688 1744 NtContinue (1244336, 0, ... 04689 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04690 1744 NtContinue (1244336, 0, ... 04691 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04692 1744 NtContinue (1244336, 0, ... 04693 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04694 1744 NtContinue (1244336, 0, ... 04695 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04696 1744 NtContinue (1244336, 0, ... 04697 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04698 1744 NtContinue (1244336, 0, ... 04699 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04700 1744 NtContinue (1244336, 0, ... 04701 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04702 1744 NtContinue (1244336, 0, ... 04703 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04704 1744 NtContinue (1244336, 0, ... 04705 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04706 1744 NtContinue (1244336, 0, ... 04707 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04708 1744 NtContinue (1244336, 0, ... 04709 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04710 1744 NtContinue (1244336, 0, ... 04711 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04712 1744 NtContinue (1244336, 0, ... 04713 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04714 1744 NtContinue (1244336, 0, ... 04715 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04716 1744 NtContinue (1244336, 0, ... 04717 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04718 1744 NtContinue (1244336, 0, ... 04719 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04720 1744 NtContinue (1244336, 0, ... 04721 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04722 1744 NtContinue (1244336, 0, ... 04723 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04724 1744 NtContinue (1244336, 0, ... 04725 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04726 1744 NtContinue (1244336, 0, ... 04727 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04728 1744 NtContinue (1244336, 0, ... 04729 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04730 1744 NtContinue (1244336, 0, ... 04731 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04732 1744 NtContinue (1244336, 0, ... 04733 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04734 1744 NtContinue (1244336, 0, ... 04735 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04736 1744 NtContinue (1244336, 0, ... 04737 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04738 1744 NtContinue (1244336, 0, ... 04739 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04740 1744 NtContinue (1244336, 0, ... 04741 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04742 1744 NtContinue (1244336, 0, ... 04743 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04744 1744 NtContinue (1244336, 0, ... 04745 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04746 1744 NtContinue (1244336, 0, ... 04747 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04748 1744 NtContinue (1244336, 0, ... 04749 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04750 1744 NtContinue (1244336, 0, ... 04751 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04752 1744 NtContinue (1244336, 0, ... 04753 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04754 1744 NtContinue (1244336, 0, ... 04755 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04756 1744 NtContinue (1244336, 0, ... 04757 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04758 1744 NtContinue (1244336, 0, ... 04759 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04760 1744 NtContinue (1244336, 0, ... 04761 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04762 1744 NtContinue (1244336, 0, ... 04763 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04764 1744 NtContinue (1244336, 0, ... 04765 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04766 1744 NtContinue (1244336, 0, ... 04767 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04768 1744 NtContinue (1244336, 0, ... 04769 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04770 1744 NtContinue (1244336, 0, ... 04771 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04772 1744 NtContinue (1244336, 0, ... 04773 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04774 1744 NtContinue (1244336, 0, ... 04775 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04776 1744 NtContinue (1244336, 0, ... 04777 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04778 1744 NtContinue (1244336, 0, ... 04779 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04780 1744 NtContinue (1244336, 0, ... 04781 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04782 1744 NtContinue (1244336, 0, ... 04783 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04784 1744 NtContinue (1244336, 0, ... 04785 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04786 1744 NtContinue (1244336, 0, ... 04787 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04788 1744 NtContinue (1244336, 0, ... 04789 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04790 1744 NtContinue (1244336, 0, ... 04791 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04792 1744 NtContinue (1244336, 0, ... 04793 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04794 1744 NtContinue (1244336, 0, ... 04795 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04796 1744 NtContinue (1244336, 0, ... 04797 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04798 1744 NtContinue (1244336, 0, ... 04799 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04800 1744 NtContinue (1244336, 0, ... 04801 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04802 1744 NtContinue (1244336, 0, ... 04803 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04804 1744 NtContinue (1244336, 0, ... 04805 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04806 1744 NtContinue (1244336, 0, ... 04807 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04808 1744 NtContinue (1244336, 0, ... 04809 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04810 1744 NtContinue (1244336, 0, ... 04811 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04812 1744 NtContinue (1244336, 0, ... 04813 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04814 1744 NtContinue (1244336, 0, ... 04815 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04816 1744 NtContinue (1244336, 0, ... 04817 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04818 1744 NtContinue (1244336, 0, ... 04819 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04820 1744 NtContinue (1244336, 0, ... 04821 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04822 1744 NtContinue (1244336, 0, ... 04823 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04824 1744 NtContinue (1244336, 0, ... 04825 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04826 1744 NtContinue (1244336, 0, ... 04827 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04828 1744 NtContinue (1244336, 0, ... 04829 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04830 1744 NtContinue (1244336, 0, ... 04831 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04832 1744 NtContinue (1244336, 0, ... 04833 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04834 1744 NtContinue (1244336, 0, ... 04835 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04836 1744 NtContinue (1244336, 0, ... 04837 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04838 1744 NtContinue (1244336, 0, ... 04839 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04840 1744 NtContinue (1244336, 0, ... 04841 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04842 1744 NtContinue (1244336, 0, ... 04843 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04844 1744 NtContinue (1244336, 0, ... 04845 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04846 1744 NtContinue (1244336, 0, ... 04847 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04848 1744 NtContinue (1244336, 0, ... 04849 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04850 1744 NtContinue (1244336, 0, ... 04851 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04852 1744 NtContinue (1244336, 0, ... 04853 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04854 1744 NtContinue (1244336, 0, ... 04855 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04856 1744 NtContinue (1244336, 0, ... 04857 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04858 1744 NtContinue (1244336, 0, ... 04859 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04860 1744 NtContinue (1244336, 0, ... 04861 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04862 1744 NtContinue (1244336, 0, ... 04863 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04864 1744 NtContinue (1244336, 0, ... 04865 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04866 1744 NtContinue (1244336, 0, ... 04867 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04868 1744 NtContinue (1244336, 0, ... 04869 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04870 1744 NtContinue (1244336, 0, ... 04871 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04872 1744 NtContinue (1244336, 0, ... 04873 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04874 1744 NtContinue (1244336, 0, ... 04875 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04876 1744 NtContinue (1244336, 0, ... 04877 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04878 1744 NtContinue (1244336, 0, ... 04879 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04880 1744 NtContinue (1244336, 0, ... 04881 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04882 1744 NtContinue (1244336, 0, ... 04883 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04884 1744 NtContinue (1244336, 0, ... 04885 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04886 1744 NtContinue (1244336, 0, ... 04887 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04888 1744 NtContinue (1244336, 0, ... 04889 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04890 1744 NtContinue (1244336, 0, ... 04891 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04892 1744 NtContinue (1244336, 0, ... 04893 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04894 1744 NtContinue (1244336, 0, ... 04895 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04896 1744 NtContinue (1244336, 0, ... 04897 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04898 1744 NtContinue (1244336, 0, ... 04899 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04900 1744 NtContinue (1244336, 0, ... 04901 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04902 1744 NtContinue (1244336, 0, ... 04903 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04904 1744 NtContinue (1244336, 0, ... 04905 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04906 1744 NtContinue (1244336, 0, ... 04907 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04908 1744 NtContinue (1244336, 0, ... 04909 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04910 1744 NtContinue (1244336, 0, ... 04911 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04912 1744 NtContinue (1244336, 0, ... 04913 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04914 1744 NtContinue (1244336, 0, ... 04915 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04916 1744 NtContinue (1244336, 0, ... 04917 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04918 1744 NtContinue (1244336, 0, ... 04919 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04920 1744 NtContinue (1244336, 0, ... 04921 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04922 1744 NtContinue (1244336, 0, ... 04923 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04924 1744 NtContinue (1244336, 0, ... 04925 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04926 1744 NtContinue (1244336, 0, ... 04927 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04928 1744 NtContinue (1244336, 0, ... 04929 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04930 1744 NtContinue (1244336, 0, ... 04931 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04932 1744 NtContinue (1244336, 0, ... 04933 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04934 1744 NtContinue (1244336, 0, ... 04935 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04936 1744 NtContinue (1244336, 0, ... 04937 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04938 1744 NtContinue (1244336, 0, ... 04939 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04940 1744 NtContinue (1244336, 0, ... 04941 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04942 1744 NtContinue (1244336, 0, ... 04943 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04944 1744 NtContinue (1244336, 0, ... 04945 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04946 1744 NtContinue (1244336, 0, ... 04947 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04948 1744 NtContinue (1244336, 0, ... 04949 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04950 1744 NtContinue (1244336, 0, ... 04951 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04952 1744 NtContinue (1244336, 0, ... 04953 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04954 1744 NtContinue (1244336, 0, ... 04955 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04956 1744 NtContinue (1244336, 0, ... 04957 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04958 1744 NtContinue (1244336, 0, ... 04959 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04960 1744 NtContinue (1244336, 0, ... 04961 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04962 1744 NtContinue (1244336, 0, ... 04963 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04964 1744 NtContinue (1244336, 0, ... 04965 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04966 1744 NtContinue (1244336, 0, ... 04967 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04968 1744 NtContinue (1244336, 0, ... 04969 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04970 1744 NtContinue (1244336, 0, ... 04971 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04972 1744 NtContinue (1244336, 0, ... 04973 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04974 1744 NtContinue (1244336, 0, ... 04975 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04976 1744 NtContinue (1244336, 0, ... 04977 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04978 1744 NtContinue (1244336, 0, ... 04979 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04980 1744 NtContinue (1244336, 0, ... 04981 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04982 1744 NtContinue (1244336, 0, ... 04983 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04984 1744 NtContinue (1244336, 0, ... 04985 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04986 1744 NtContinue (1244336, 0, ... 04987 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04988 1744 NtContinue (1244336, 0, ... 04989 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04990 1744 NtContinue (1244336, 0, ... 04991 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04992 1744 NtContinue (1244336, 0, ... 04993 1744 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0