Summary:

NtAddAtom(>) 1 NtQueryInstallUILanguage(>) 1 NtSetInformationObject(>) 2 NtQueryAttributesFile(>) 14
NtCallbackReturn(>) 1 NtQueryObject(>) 1 NtAccessCheck(>) 3 NtOpenFile(>) 20
NtCreateEvent(>) 1 NtQuerySymbolicLinkObject(>) 1 NtGdiCreateCompatibleDC(>) 3 NtOpenSection(>) 20
NtCreateFile(>) 1 NtQueryVolumeInformationFile(>) 1 NtUserRegisterWindowMessage(>) 3 NtQuerySystemInformation(>) 24
NtCreateKey(>) 1 NtRegisterThreadTerminatePort(>) 1 NtQueryDefaultLocale(>) 4 NtQueryValueKey(>) 26
NtCreateSemaphore(>) 1 NtSecureConnectPort(>) 1 NtGdiGetStockObject(>) 5 NtAllocateVirtualMemory(>) 28
NtDuplicateObject(>) 1 NtSetInformationProcess(>) 1 NtOpenProcessToken(>) 5 NtMapViewOfSection(>) 29
NtEnumerateValueKey(>) 1 NtSetInformationThread(>) 1 NtQueryInformationProcess(>) 5 NtUserFindExistingCursorIcon(>) 50
NtFsControlFile(>) 1 NtSetValueKey(>) 1 NtQuerySection(>) 5 NtOpenKey(>) 60
NtGdiCreateBitmap(>) 1 NtTestAlert(>) 1 NtRequestWaitReplyPort(>) 7 NtUserRegisterClassExWOW(>) 61
NtGdiInit(>) 1 NtUserCallNoParam(>) 1 NtOpenProcessTokenEx(>) 8 NtFlushInstructionCache(>) 65
NtGdiQueryFontAssocInfo(>) 1 NtUserCallOneParam(>) 1 NtOpenThreadTokenEx(>) 8 NtClose(>) 87
NtGdiSelectBitmap(>) 1 NtUserGetDC(>) 1 NtQueryDefaultUILanguage(>) 8 NtProtectVirtualMemory(>) 130
NtOpenEvent(>) 1 NtUserGetThreadDesktop(>) 1 NtUnmapViewOfSection(>) 8 NtContinue(>) 2112
NtOpenKeyedEvent(>) 1 NtDeviceIoControlFile(>) 2 NtQueryDebugFilterState(>) 9 NtQueryVirtualMemory(>) 2116
NtOpenProcess(>) 1 NtFreeVirtualMemory(>) 2 NtQueryInformationToken(>) 11
NtOpenSymbolicLinkObject(>) 1 NtGdiCreateSolidBrush(>) 2 NtUserSystemParametersInfo(>) 11
NtQueryInformationFile(>) 1

Trace:

00001 808 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 808 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 808 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 808 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 808 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 808 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 808 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 808 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 808 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 808 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 808 NtClose (12, ... ) == 0x0 00015 808 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 808 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 808 NtClose (16, ... ) == 0x0 00021 808 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 808 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 808 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 808 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 808 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 808 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 808 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 19267584}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 19267584}, {0, 0, 0}, 200, 44, ) == 0x0 00029 808 NtClose (16, ... ) == 0x0 00030 808 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 808 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 808 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 808 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 808 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6&\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6&\1\4\0\0\0" ... {28, 56, reply, 0, 1356, 808, 75540, 0} "\330<\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6&\1\4\0\0\0" ) ... {28, 56, reply, 0, 1356, 808, 75540, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6&\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6&\1\4\0\0\0" ... {28, 56, reply, 0, 1356, 808, 75540, 0} "\330<\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6&\1\4\0\0\0" ) ) == 0x0 00036 808 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 808 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 808 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 808 NtClose (16, ... ) == 0x0 00041 808 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 808 NtClose (16, ... ) == 0x0 00044 808 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 808 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 808 NtClose (16, ... ) == 0x0 00048 808 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 808 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 808 NtClose (16, ... ) == 0x0 00052 808 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 808 NtClose (16, ... ) == 0x0 00055 808 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 808 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 808 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 808 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 808 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6&\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6&\1p\30\0\0" ... {24, 52, reply, 0, 1356, 808, 75546, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6&\1p\30\0\0" ) ... {24, 52, reply, 0, 1356, 808, 75546, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6&\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6&\1p\30\0\0" ... {24, 52, reply, 0, 1356, 808, 75546, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6&\1p\30\0\0" ) ) == 0x0 00060 808 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6&\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6&\18\6\0\0" ... {28, 56, reply, 0, 1356, 808, 75547, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6&\18\6\0\0" ) ... {28, 56, reply, 0, 1356, 808, 75547, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6&\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6&\18\6\0\0" ... {28, 56, reply, 0, 1356, 808, 75547, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6&\18\6\0\0" ) ) == 0x0 00061 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 128, ) == 0x0 00062 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 128, ... (0x46d000), 77824, 4, ) == 0x0 00063 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00064 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00065 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00066 808 NtClose (16, ... ) == 0x0 00067 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00068 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00069 808 NtClose (16, ... ) == 0x0 00070 808 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00071 808 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00072 808 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00073 808 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00074 808 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00075 808 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00076 808 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00077 808 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00078 808 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00079 808 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00080 808 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00081 808 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00082 808 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00083 808 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00084 808 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00085 808 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00086 808 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00087 808 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00088 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00089 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00090 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00091 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "advapi32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00092 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00093 808 NtClose (16, ... ) == 0x0 00094 808 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00095 808 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00096 808 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00097 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 16, ) }, ... 16, ) == 0x0 00098 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00099 808 NtClose (16, ... ) == 0x0 00100 808 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00101 808 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00102 808 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00103 808 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00104 808 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00105 808 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00106 808 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00107 808 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00108 808 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00109 808 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00110 808 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00111 808 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00112 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00113 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00114 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00115 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00116 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00117 808 NtClose (16, ... ) == 0x0 00118 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00119 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00120 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00121 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00122 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00123 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00124 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00125 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00126 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00127 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 16, ) }, ... 16, ) == 0x0 00128 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00129 808 NtClose (16, ... ) == 0x0 00130 808 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00131 808 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00132 808 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00133 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00134 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00135 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00136 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00137 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00138 808 NtClose (16, ... ) == 0x0 00139 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00140 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00141 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00142 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00143 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00144 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00145 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00146 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00147 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00148 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00149 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00150 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00151 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00152 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00153 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00154 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00155 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00156 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00157 808 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00158 808 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00159 808 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00160 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00161 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00162 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00163 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00164 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00165 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00166 808 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00167 808 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00168 808 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00169 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00170 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00171 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00172 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00173 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00174 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00175 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00176 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c9c0000), 0x0, 8482816, ) == 0x0 00177 808 NtClose (16, ... ) == 0x0 00178 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00179 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00180 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00181 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00182 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00183 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00184 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00185 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00186 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00187 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00188 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00189 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00190 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00191 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00192 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00193 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00194 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00195 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00196 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 16, ) }, ... 16, ) == 0x0 00197 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f60000), 0x0, 483328, ) == 0x0 00198 808 NtClose (16, ... ) == 0x0 00199 808 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00200 808 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00201 808 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00202 808 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00203 808 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00204 808 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00205 808 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00206 808 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00207 808 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00208 808 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00209 808 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00210 808 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00211 808 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00212 808 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00213 808 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00214 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00215 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00216 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00217 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00218 808 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00219 808 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00220 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00221 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00222 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00223 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00224 808 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00225 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00226 808 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00227 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == 0x0 00228 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00229 808 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00230 808 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00231 808 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00232 808 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00233 808 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00234 808 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00235 808 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00236 808 NtClose (36, ... ) == 0x0 00237 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00238 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00239 808 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00240 808 NtClose (36, ... ) == 0x0 00241 808 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00242 808 NtClose (32, ... ) == 0x0 00243 808 NtClose (16, ... ) == 0x0 00244 808 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 94208, ) == 0x0 00245 808 NtClose (28, ... ) == 0x0 00246 808 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00247 808 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00248 808 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00249 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00251 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == 0x0 00252 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00253 808 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00254 808 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00255 808 NtClose (28, ... ) == 0x0 00256 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00257 808 NtClose (16, ... ) == 0x0 00258 808 NtProtectVirtualMemory (-1, (0x71aa1000), 352, 4, ... (0x71aa1000), 4096, 32, ) == 0x0 00259 808 NtProtectVirtualMemory (-1, (0x71aa1000), 4096, 32, ... (0x71aa1000), 4096, 4, ) == 0x0 00260 808 NtFlushInstructionCache (-1, 1906970624, 352, ... ) == 0x0 00261 808 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00262 808 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00263 808 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00264 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00265 808 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00266 808 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00267 808 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00268 808 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00269 808 NtOpenProcessToken (-1, 0x8, ... 16, ) == 0x0 00270 808 NtQueryInformationToken (16, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00271 808 NtClose (16, ... ) == 0x0 00272 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00273 808 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00274 808 NtClose (16, ... ) == 0x0 00275 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00276 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00277 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00278 808 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6&\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6&\1$\1\0\0" ... {28, 56, reply, 0, 1356, 808, 75645, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6&\1$\1\0\0" ) ... {28, 56, reply, 0, 1356, 808, 75645, 0} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6&\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6&\1$\1\0\0" ... {28, 56, reply, 0, 1356, 808, 75645, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6&\1$\1\0\0" ) ) == 0x0 00279 808 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 16, ) }, ... 16, ) == 0x0 00280 808 NtQueryValueKey (16, (16, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00281 808 NtClose (16, ... ) == 0x0 00282 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00283 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00284 808 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00285 808 NtClose (16, ... ) == 0x0 00286 808 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00287 808 NtClose (28, ... ) == 0x0 00288 808 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00289 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00290 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00291 808 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00292 808 NtClose (28, ... ) == 0x0 00293 808 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00294 808 NtClose (16, ... ) == 0x0 00295 808 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00296 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00297 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00298 808 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00299 808 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00300 808 NtClose (16, ... ) == 0x0 00301 808 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00302 808 NtClose (28, ... ) == 0x0 00303 808 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00304 808 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00305 808 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00306 808 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00307 808 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00308 808 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00309 808 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00310 808 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00311 808 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00312 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00313 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00314 808 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00315 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00316 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00317 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00318 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00319 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00320 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00322 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00323 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00325 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00326 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00327 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00328 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 28, ) }, ... 28, ) == 0x0 00330 808 NtQueryValueKey (28, (28, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00331 808 NtClose (28, ... ) == 0x0 00332 808 NtMapViewOfSection (-2147481372, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x480000), 0x0, 1060864, ) == 0x0 00333 808 NtClose (-2147481372, ... ) == 0x0 00334 808 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 28, ) == 0x0 00335 808 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00336 808 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147481372, ) == 0x0 00337 808 NtQueryInformationToken (-2147481372, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00338 808 NtQueryInformationToken (-2147481372, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00339 808 NtClose (-2147481372, ... ) == 0x0 00340 808 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00341 808 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00342 808 NtDuplicateObject (-1, 16, -1, 0x0, 0, 2, ... 36, ) == 0x0 00343 808 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147481372, ) }, ... -2147481372, ) == 0x0 00344 808 NtQueryValueKey (-2147481372, (-2147481372, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00345 808 NtClose (-2147481372, ... ) == 0x0 00346 808 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147481372, ) }, ... -2147481372, ) == 0x0 00347 808 NtQueryValueKey (-2147481372, (-2147481372, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00348 808 NtClose (-2147481372, ... ) == 0x0 00349 808 NtQueryDefaultLocale (0, -142005940, ... ) == 0x0 00350 808 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00351 808 NtUserCallNoParam (24, ... ) == 0x0 00352 808 NtGdiCreateCompatibleDC (0, ... 00353 808 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00352 808 NtGdiCreateCompatibleDC ... ) == 0xb3010623 00354 808 NtGdiGetStockObject (0, ... ) == 0x1900010 00355 808 NtGdiGetStockObject (4, ... ) == 0x1900011 00356 808 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0x9f0504fb 00357 808 NtGdiCreateSolidBrush (0, 0, ... 00358 808 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8978432, 4096, ) == 0x0 00357 808 NtGdiCreateSolidBrush ... ) == 0x8210062f 00359 808 NtGdiGetStockObject (13, ... ) == 0x18a0021 00360 808 NtGdiCreateCompatibleDC (0, ... ) == 0x5f01056a 00361 808 NtGdiSelectBitmap (1593902442, -1627060997, ... ) == 0x185000f 00362 808 NtUserGetThreadDesktop (808, 0, ... ) == 0x20 00363 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00364 808 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00365 808 NtClose (40, ... ) == 0x0 00366 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00367 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x819fc017 00368 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00369 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x819fc01c 00370 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00371 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x819fc01e 00372 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00373 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x819f8002 00374 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00375 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x819fc018 00376 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00377 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x819fc01a 00378 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00379 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x819fc01d 00380 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00381 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x819fc026 00382 808 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00383 808 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x819fc019 00384 808 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x819fc020 00385 808 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x819fc022 00386 808 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x819fc023 00387 808 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x819fc024 00388 808 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x819fc025 00389 808 NtCallbackReturn (0, 0, 0, ... 00390 808 NtGdiInit (... ) == 0x1 00391 808 NtGdiGetStockObject (18, ... ) == 0x290001c 00392 808 NtGdiGetStockObject (19, ... ) == 0x1b00019 00393 808 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00394 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00395 808 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00396 808 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00397 808 NtClose (40, ... ) == 0x0 00398 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00399 808 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00400 808 NtClose (40, ... ) == 0x0 00401 808 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00402 808 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00403 808 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00404 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00405 808 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9043968, 65536, ) == 0x0 00406 808 NtAllocateVirtualMemory (-1, 9043968, 0, 4096, 4096, 4, ... 9043968, 4096, ) == 0x0 00407 808 NtAllocateVirtualMemory (-1, 9048064, 0, 8192, 4096, 4, ... 9048064, 8192, ) == 0x0 00408 808 NtAllocateVirtualMemory (-1, 9056256, 0, 4096, 4096, 4, ... 9056256, 4096, ) == 0x0 00409 808 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00410 808 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8b0000), 0x0, 12288, ) == 0x0 00411 808 NtClose (44, ... ) == 0x0 00412 808 NtAllocateVirtualMemory (-1, 9060352, 0, 4096, 4096, 4, ... 9060352, 4096, ) == 0x0 00413 808 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00414 808 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00415 808 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00416 808 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00417 808 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00418 808 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00419 808 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\260I\20\303^\323\217b\225v\217r3t\372\255\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00420 808 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00421 808 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00422 808 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00423 808 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00424 808 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00425 808 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00426 808 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00427 808 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147481372, 2, ) }, 0, 0x0, 0, ... -2147481372, 2, ) == 0x0 00428 808 NtSetValueKey (-2147481372, (-2147481372, "Seed", 0, 3, "\336W\223w\276N?;ad\264}\265\274\344\355Z\256\217{\234\305\263\317g\355\347@\20\232\277\5f\305\374\216\177\251?5~V\334\267G\36%WI\10\7$\11e\343\242\0\375;6G7\356O\371\231\301\267\315\271R\322hhP\266\300\232\353\340", 80, ... ) , 0, 3, (-2147481372, "Seed", 0, 3, "\336W\223w\276N?;ad\264}\265\274\344\355Z\256\217{\234\305\263\317g\355\347@\20\232\277\5f\305\374\216\177\251?5~V\334\267G\36%WI\10\7$\11e\343\242\0\375;6G7\356O\371\231\301\267\315\271R\322hhP\266\300\232\353\340", 80, ... ) , 80, ... ) == 0x0 00429 808 NtClose (-2147481372, ... ) == 0x0 00419 808 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "v\272x&\333D\265\303c\2263\315_2\324\315\223\370\211FL\257\13\246t\213\0\0Gg\254\310 d\232\371Ww\301\375\224M\17S\250x\362\306k\26\272\27\273SE\26\326\256\305\206\256^\234p[0\343\12F\306\200J\302\366\272\376\224\33-[,\224\244\350\312D\252\376\273\223\217\250)\201v\273 r\206@\254\227\222\14\224\346B\311-+\313\331\245C=0t\326\1\211\374\367\210\232\367mJ\7\267\25\332\376;\363"_0\334\7\211\227#;\211\2771H\211t8\223\327\235FPs\324q\363\370w\22Df[\\370\354\266\221w\231\260\273a\337\2\275\207\5\355=\341\370\35\230EwB\2\374kt\265\204\357\206\330E\237\35\271\233\361\377\367\266P\237\34?\201\357w\367\301=;\325\11\34\347(P\216\371\302\33\221\344\343@\304\317\272I\3435\37\273D\147`t\232\314\225\351!\253=b\312]", ) _0\334\7\211\227#;\211\2771H\211t8\223\327\235FPs\324q\363\370w\22Df[\\370\354\266\221w\231\260\273a\337\2\275\207\5\355=\341\370\35\230EwB\2\374kt\265\204\357\206\330E\237\35\271\233\361\377\367\266P\237\34?\201\357w\367\301=;\325\11\34\347(P\216\371\302\33\221\344\343@\304\317\272I\3435\37\273D\147`t\232\314\225\351!\253=b\312]", ) == 0x0 00430 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00431 808 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00432 808 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00433 808 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00434 808 NtClose (48, ... ) == 0x0 00435 808 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00436 808 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00437 808 NtClose (48, ... ) == 0x0 00438 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00439 808 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00440 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00441 808 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00442 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00443 808 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00444 808 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00445 808 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00446 808 NtClose (48, ... ) == 0x0 00447 808 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00448 808 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00449 808 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00450 808 NtClose (48, ... ) == 0x0 00451 808 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00452 808 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00453 808 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00454 808 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00455 808 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00456 808 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00457 808 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00458 808 NtCreateSemaphore (0x1f0003, {24, 48, 0x80, 1333696, 0, (0x1f0003, {24, 48, 0x80, 1333696, 0, "shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}"}, 0, 2147483647, ... 52, ) }, 0, 2147483647, ... 52, ) == STATUS_OBJECT_NAME_EXISTS 00459 808 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0 00460 808 NtQueryValueKey (56, (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00461 808 NtClose (56, ... ) == 0x0 00462 808 NtQueryDefaultUILanguage (1241692, ... 00463 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00464 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481372, ) == 0x0 00465 808 NtQueryInformationToken (-2147481372, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00466 808 NtClose (-2147481372, ... ) == 0x0 00467 808 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481372, ) }, ... -2147481372, ) == 0x0 00468 808 NtOpenKey (0x80000000, {24, -2147481372, 0x240, 0, 0, (0x80000000, {24, -2147481372, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00469 808 NtOpenKey (0x80000000, {24, -2147481372, 0x640, 0, 0, (0x80000000, {24, -2147481372, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482648, ) }, ... -2147482648, ) == 0x0 00470 808 NtQueryValueKey (-2147482648, (-2147482648, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00471 808 NtClose (-2147482648, ... ) == 0x0 00472 808 NtClose (-2147481372, ... ) == 0x0 00462 808 NtQueryDefaultUILanguage ... ) == 0x0 00473 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00474 808 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0 00475 808 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 8462336, ) == 0x0 00476 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00477 808 NtQueryDefaultUILanguage (2090319928, ... 00478 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00479 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481372, ) == 0x0 00480 808 NtQueryInformationToken (-2147481372, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00481 808 NtClose (-2147481372, ... ) == 0x0 00482 808 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481372, ) }, ... -2147481372, ) == 0x0 00483 808 NtOpenKey (0x80000000, {24, -2147481372, 0x240, 0, 0, (0x80000000, {24, -2147481372, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00484 808 NtOpenKey (0x80000000, {24, -2147481372, 0x640, 0, 0, (0x80000000, {24, -2147481372, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482648, ) }, ... -2147482648, ) == 0x0 00485 808 NtQueryValueKey (-2147482648, (-2147482648, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00486 808 NtClose (-2147482648, ... ) == 0x0 00487 808 NtClose (-2147481372, ... ) == 0x0 00477 808 NtQueryDefaultUILanguage ... ) == 0x0 00488 808 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00489 808 NtQueryDefaultLocale (1, 1239788, ... ) == 0x0 00490 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00491 808 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6&\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6&\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6&\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1356, 808, 75646, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6&\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6&\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1356, 808, 75646, 0} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6&\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6&\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6&\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1356, 808, 75646, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6&\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6&\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ) == 0x0 00492 808 NtClose (56, ... ) == 0x0 00493 808 NtClose (60, ... ) == 0x0 00494 808 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00495 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00496 808 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00497 808 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00498 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00499 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00500 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238980, ... ) }, 1238980, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00501 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00502 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00503 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00504 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 1239044, ... ) }, 1239044, ... ) == 0x0 00505 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0 00506 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00507 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00508 808 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00509 808 NtClose (56, ... ) == 0x0 00510 808 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 1056768, ) == 0x0 00511 808 NtClose (64, ... ) == 0x0 00512 808 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00513 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00514 808 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0 00515 808 NtQuerySection (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00516 808 NtClose (64, ... ) == 0x0 00517 808 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 1060864, ) == 0x0 00518 808 NtClose (56, ... ) == 0x0 00519 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00520 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00521 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00522 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00523 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00524 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00525 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00526 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00527 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00528 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00529 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00530 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00531 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00532 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00533 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00534 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00535 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00536 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00537 808 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00538 808 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00539 808 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00540 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00541 808 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240524, ... ) , 42, 1240524, ... ) == 0x0 00542 808 NtQueryDefaultUILanguage (1239208, ... 00543 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00544 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481372, ) == 0x0 00545 808 NtQueryInformationToken (-2147481372, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00546 808 NtClose (-2147481372, ... ) == 0x0 00547 808 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481372, ) }, ... -2147481372, ) == 0x0 00548 808 NtOpenKey (0x80000000, {24, -2147481372, 0x240, 0, 0, (0x80000000, {24, -2147481372, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00549 808 NtOpenKey (0x80000000, {24, -2147481372, 0x640, 0, 0, (0x80000000, {24, -2147481372, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482648, ) }, ... -2147482648, ) == 0x0 00550 808 NtQueryValueKey (-2147482648, (-2147482648, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00551 808 NtClose (-2147482648, ... ) == 0x0 00552 808 NtClose (-2147481372, ... ) == 0x0 00542 808 NtQueryDefaultUILanguage ... ) == 0x0 00553 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238048, ... ) }, 1238048, ... ) == 0x0 00554 808 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00555 808 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00556 808 NtClose (56, ... ) == 0x0 00557 808 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 4096, ) == 0x0 00558 808 NtClose (64, ... ) == 0x0 00559 808 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00560 808 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237644, ... ) }, 1237644, ... ) == 0x0 00561 808 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1238388, (0x80100080, {24, 0, 0x40, 0, 1238388, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0 00562 808 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00563 808 NtClose (64, ... ) == 0x0 00564 808 NtMapViewOfSection (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8c0000), {0, 0}, 4096, ) == 0x0 00565 808 NtClose (56, ... ) == 0x0 00566 808 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00567 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00568 808 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0 00569 808 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 4096, ) == 0x0 00570 808 NtQueryInformationFile (56, 1238040, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00571 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00572 808 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6&\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6&\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6&\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1356, 808, 75652, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6&\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6&\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1356, 808, 75652, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6&\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6&\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6&\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1356, 808, 75652, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6&\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6&\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ) == 0x0 00573 808 NtClose (56, ... ) == 0x0 00574 808 NtClose (64, ... ) == 0x0 00575 808 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00576 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00577 808 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00578 808 NtUserSystemParametersInfo (104, 0, 2001084812, 0, ... ) == 0x1 00579 808 NtUserGetDC (0, ... ) == 0x1010054 00580 808 NtUserCallOneParam (16842836, 57, ... ) == 0x1 00581 808 NtUserSystemParametersInfo (38, 4, 2001086940, 0, ... ) == 0x1 00582 808 NtUserSystemParametersInfo (66, 12, 1240040, 0, ... ) == 0x1 00583 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00584 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 64, ) == 0x0 00585 808 NtQueryInformationToken (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00586 808 NtClose (64, ... ) == 0x0 00587 808 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 64, ) }, ... 64, ) == 0x0 00588 808 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00589 808 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00590 808 NtClose (56, ... ) == 0x0 00591 808 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0 00592 808 NtQueryValueKey (56, (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00593 808 NtClose (56, ... ) == 0x0 00594 808 NtUserSystemParametersInfo (41, 500, 1240068, 0, ... ) == 0x1 00595 808 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00596 808 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00597 808 NtClose (56, ... ) == 0x0 00598 808 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0 00599 808 NtQueryValueKey (56, (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00600 808 NtClose (56, ... ) == 0x0 00601 808 NtUserSystemParametersInfo (27, 0, 2001085788, 0, ... ) == 0x1 00602 808 NtUserSystemParametersInfo (102, 0, 2001086828, 0, ... ) == 0x1 00603 808 NtClose (64, ... ) == 0x0 00604 808 NtUserSystemParametersInfo (4130, 0, 1240572, 0, ... ) == 0x1 00605 808 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 64, ) }, ... 64, ) == 0x0 00606 808 NtEnumerateValueKey (64, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00607 808 NtClose (64, ... ) == 0x0 00608 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00609 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc03b 00610 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc03d 00611 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00612 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc03f 00613 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00614 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc041 00615 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00616 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc043 00617 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc045 00618 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00619 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc047 00620 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00621 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc049 00622 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00623 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc04b 00624 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00625 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc04d 00626 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00627 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc04f 00628 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc051 00629 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00630 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc053 00631 808 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00632 808 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x819fc055 00633 808 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00634 808 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x819fc057 00635 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00636 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc059 00637 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00638 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc05b 00639 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00640 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc05d 00641 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00642 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc05f 00643 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00644 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc017 00645 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00646 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc019 00647 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00648 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc018 00649 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00650 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc01a 00651 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00652 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc01c 00653 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00654 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc01e 00655 808 NtUserFindExistingCursorIcon (1239812, 1239828, 1239876, ... ) == 0x10011 00656 808 NtUserRegisterClassExWOW (1239812, 1239880, 1239896, 1239912, 0, 384, 0, ... ) == 0x819fc01b 00657 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00658 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc068 00659 808 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00660 808 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x819fc06a 00661 808 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 64, ) }, ... 64, ) == 0x0 00662 808 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5d090000), 0x0, 630784, ) == 0x0 00663 808 NtClose (64, ... ) == 0x0 00664 808 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00665 808 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00666 808 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00667 808 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00668 808 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00669 808 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00670 808 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00671 808 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00672 808 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00673 808 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00674 808 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00675 808 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00676 808 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00677 808 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00678 808 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00679 808 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00680 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00681 808 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0 00682 808 NtAllocateVirtualMemory (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0 00683 808 NtAllocateVirtualMemory (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0 00684 808 NtAllocateVirtualMemory (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0 00685 808 NtAllocateVirtualMemory (-1, 9191424, 0, 4096, 4096, 4, ... 9191424, 4096, ) == 0x0 00686 808 NtQueryDefaultUILanguage (1239820, ... 00687 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00688 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481372, ) == 0x0 00689 808 NtQueryInformationToken (-2147481372, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00690 808 NtClose (-2147481372, ... ) == 0x0 00691 808 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481372, ) }, ... -2147481372, ) == 0x0 00692 808 NtOpenKey (0x80000000, {24, -2147481372, 0x240, 0, 0, (0x80000000, {24, -2147481372, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00693 808 NtOpenKey (0x80000000, {24, -2147481372, 0x640, 0, 0, (0x80000000, {24, -2147481372, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147482648, ) }, ... -2147482648, ) == 0x0 00694 808 NtQueryValueKey (-2147482648, (-2147482648, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00695 808 NtClose (-2147482648, ... ) == 0x0 00696 808 NtClose (-2147481372, ... ) == 0x0 00686 808 NtQueryDefaultUILanguage ... ) == 0x0 00697 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll"}, 1, 96, ... 64, {status=0x0, info=1}, ) }, 1, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00698 808 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00699 808 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 618496, ) == 0x0 00700 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00701 808 NtQueryDefaultLocale (1, 1237916, ... ) == 0x0 00702 808 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00703 808 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6&\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6&\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6&\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1356, 808, 75653, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6&\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6&\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1356, 808, 75653, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6&\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6&\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6&\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1356, 808, 75653, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6&\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6&\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ) == 0x0 00704 808 NtClose (64, ... ) == 0x0 00705 808 NtClose (56, ... ) == 0x0 00706 808 NtUnmapViewOfSection (-1, 0x8e0000, ... ) == 0x0 00707 808 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00708 808 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {1356, 0}, ... 56, ) == 0x0 00709 808 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00710 808 NtClose (56, ... ) == 0x0 00711 808 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00712 808 NtUserSystemParametersInfo (104, 0, 1561338260, 0, ... ) == 0x1 00713 808 NtUserSystemParametersInfo (38, 4, 1561337988, 0, ... ) == 0x1 00714 808 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00715 808 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00716 808 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00717 808 NtClose (56, ... ) == 0x0 00718 808 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 56, ) }, ... 56, ) == 0x0 00719 808 NtOpenProcessToken (-1, 0x8, ... 64, ) == 0x0 00720 808 NtAccessCheck (1332816, 64, 0x1, 1241012, 1241064, 56, 1241044, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00721 808 NtClose (64, ... ) == 0x0 00722 808 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00723 808 NtQueryValueKey (64, (64, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00724 808 NtClose (64, ... ) == 0x0 00725 808 NtUserSystemParametersInfo (41, 500, 1241192, 0, ... ) == 0x1 00726 808 NtUserSystemParametersInfo (102, 0, 1561338280, 0, ... ) == 0x1 00727 808 NtClose (56, ... ) == 0x0 00728 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00729 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc03b 00730 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc03d 00731 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00732 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc03f 00733 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00734 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc041 00735 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00736 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc043 00737 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc045 00738 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00739 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc047 00740 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00741 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc049 00742 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00743 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc04b 00744 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00745 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc04d 00746 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00747 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc04f 00748 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc051 00749 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00750 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc053 00751 808 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00752 808 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x819fc055 00753 808 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00754 808 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x819fc057 00755 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00756 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc059 00757 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10013 00758 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc05b 00759 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00760 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc05d 00761 808 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00762 808 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x819fc05f 00763 808 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00764 808 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00765 808 NtTestAlert (... ) == 0x0 00766 808 NtContinue (1244464, 1, ... 00767 808 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x411704,}, 4, ... ) == 0x0 00768 808 NtQueryVirtualMemory (-1, 0x47d64b, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00769 808 NtContinue (1244336, 0, ... 00770 808 NtAllocateVirtualMemory (-1, 0, 0, 122368, 4096, 4, ... 9306112, 122880, ) == 0x0 00771 808 NtQueryVirtualMemory (-1, 0x47d8c6, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00772 808 NtContinue (1244320, 0, ... 00773 808 NtAllocateVirtualMemory (-1, 0, 0, 147456, 4096, 4, ... 9437184, 147456, ) == 0x0 00774 808 NtQueryVirtualMemory (-1, 0x47d9f0, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00775 808 NtContinue (1244320, 0, ... 00776 808 NtQueryVirtualMemory (-1, 0x47dae3, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00777 808 NtContinue (1244328, 0, ... 00778 808 NtQueryVirtualMemory (-1, 0x47dbcf, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00779 808 NtContinue (1244316, 0, ... 00780 808 NtQueryVirtualMemory (-1, 0x47dcf3, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00781 808 NtContinue (1244328, 0, ... 00782 808 NtQueryVirtualMemory (-1, 0x47de0b, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00783 808 NtContinue (1244336, 0, ... 00784 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00785 808 NtContinue (1244328, 0, ... 00786 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00787 808 NtContinue (1244328, 0, ... 00788 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00789 808 NtContinue (1244328, 0, ... 00790 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00791 808 NtContinue (1244328, 0, ... 00792 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00793 808 NtContinue (1244328, 0, ... 00794 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00795 808 NtContinue (1244328, 0, ... 00796 808 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00797 808 NtContinue (1244328, 0, ... 00798 808 NtFreeVirtualMemory (-1, (0x8e0000), 122368, 16384, ... (0x8e0000), 122880, ) == 0x0 00799 808 NtQueryVirtualMemory (-1, 0x47e2de, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00800 808 NtContinue (1244336, 0, ... 00801 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00802 808 NtContinue (1244336, 0, ... 00803 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00804 808 NtContinue (1244336, 0, ... 00805 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00806 808 NtContinue (1244336, 0, ... 00807 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00808 808 NtContinue (1244336, 0, ... 00809 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00810 808 NtContinue (1244336, 0, ... 00811 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00812 808 NtContinue (1244336, 0, ... 00813 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00814 808 NtContinue (1244336, 0, ... 00815 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00816 808 NtContinue (1244336, 0, ... 00817 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00818 808 NtContinue (1244336, 0, ... 00819 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00820 808 NtContinue (1244336, 0, ... 00821 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00822 808 NtContinue (1244336, 0, ... 00823 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00824 808 NtContinue (1244336, 0, ... 00825 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00826 808 NtContinue (1244336, 0, ... 00827 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00828 808 NtContinue (1244336, 0, ... 00829 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00830 808 NtContinue (1244336, 0, ... 00831 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00832 808 NtContinue (1244336, 0, ... 00833 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00834 808 NtContinue (1244336, 0, ... 00835 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00836 808 NtContinue (1244336, 0, ... 00837 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00838 808 NtContinue (1244336, 0, ... 00839 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00840 808 NtContinue (1244336, 0, ... 00841 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00842 808 NtContinue (1244336, 0, ... 00843 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00844 808 NtContinue (1244336, 0, ... 00845 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00846 808 NtContinue (1244336, 0, ... 00847 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00848 808 NtContinue (1244336, 0, ... 00849 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00850 808 NtContinue (1244336, 0, ... 00851 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00852 808 NtContinue (1244336, 0, ... 00853 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00854 808 NtContinue (1244336, 0, ... 00855 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00856 808 NtContinue (1244336, 0, ... 00857 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00858 808 NtContinue (1244336, 0, ... 00859 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00860 808 NtContinue (1244336, 0, ... 00861 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00862 808 NtContinue (1244336, 0, ... 00863 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00864 808 NtContinue (1244336, 0, ... 00865 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00866 808 NtContinue (1244336, 0, ... 00867 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00868 808 NtContinue (1244336, 0, ... 00869 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00870 808 NtContinue (1244336, 0, ... 00871 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00872 808 NtContinue (1244336, 0, ... 00873 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00874 808 NtContinue (1244336, 0, ... 00875 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00876 808 NtContinue (1244336, 0, ... 00877 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00878 808 NtContinue (1244336, 0, ... 00879 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00880 808 NtContinue (1244336, 0, ... 00881 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00882 808 NtContinue (1244336, 0, ... 00883 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00884 808 NtContinue (1244336, 0, ... 00885 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00886 808 NtContinue (1244336, 0, ... 00887 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00888 808 NtContinue (1244336, 0, ... 00889 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00890 808 NtContinue (1244336, 0, ... 00891 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00892 808 NtContinue (1244336, 0, ... 00893 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00894 808 NtContinue (1244336, 0, ... 00895 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00896 808 NtContinue (1244336, 0, ... 00897 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00898 808 NtContinue (1244336, 0, ... 00899 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00900 808 NtContinue (1244336, 0, ... 00901 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00902 808 NtContinue (1244336, 0, ... 00903 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00904 808 NtContinue (1244336, 0, ... 00905 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00906 808 NtContinue (1244336, 0, ... 00907 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00908 808 NtContinue (1244336, 0, ... 00909 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00910 808 NtContinue (1244336, 0, ... 00911 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00912 808 NtContinue (1244336, 0, ... 00913 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00914 808 NtContinue (1244336, 0, ... 00915 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00916 808 NtContinue (1244336, 0, ... 00917 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00918 808 NtContinue (1244336, 0, ... 00919 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00920 808 NtContinue (1244336, 0, ... 00921 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00922 808 NtContinue (1244336, 0, ... 00923 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00924 808 NtContinue (1244336, 0, ... 00925 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00926 808 NtContinue (1244336, 0, ... 00927 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00928 808 NtContinue (1244336, 0, ... 00929 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00930 808 NtContinue (1244336, 0, ... 00931 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00932 808 NtContinue (1244336, 0, ... 00933 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00934 808 NtContinue (1244336, 0, ... 00935 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00936 808 NtContinue (1244336, 0, ... 00937 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00938 808 NtContinue (1244336, 0, ... 00939 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00940 808 NtContinue (1244336, 0, ... 00941 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00942 808 NtContinue (1244336, 0, ... 00943 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00944 808 NtContinue (1244336, 0, ... 00945 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00946 808 NtContinue (1244336, 0, ... 00947 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00948 808 NtContinue (1244336, 0, ... 00949 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00950 808 NtContinue (1244336, 0, ... 00951 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00952 808 NtContinue (1244336, 0, ... 00953 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00954 808 NtContinue (1244336, 0, ... 00955 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00956 808 NtContinue (1244336, 0, ... 00957 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00958 808 NtContinue (1244336, 0, ... 00959 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00960 808 NtContinue (1244336, 0, ... 00961 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00962 808 NtContinue (1244336, 0, ... 00963 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00964 808 NtContinue (1244336, 0, ... 00965 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00966 808 NtContinue (1244336, 0, ... 00967 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00968 808 NtContinue (1244336, 0, ... 00969 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00970 808 NtContinue (1244336, 0, ... 00971 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00972 808 NtContinue (1244336, 0, ... 00973 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00974 808 NtContinue (1244336, 0, ... 00975 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00976 808 NtContinue (1244336, 0, ... 00977 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00978 808 NtContinue (1244336, 0, ... 00979 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00980 808 NtContinue (1244336, 0, ... 00981 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00982 808 NtContinue (1244336, 0, ... 00983 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00984 808 NtContinue (1244336, 0, ... 00985 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00986 808 NtContinue (1244336, 0, ... 00987 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00988 808 NtContinue (1244336, 0, ... 00989 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00990 808 NtContinue (1244336, 0, ... 00991 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00992 808 NtContinue (1244336, 0, ... 00993 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00994 808 NtContinue (1244336, 0, ... 00995 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00996 808 NtContinue (1244336, 0, ... 00997 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00998 808 NtContinue (1244336, 0, ... 00999 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01000 808 NtContinue (1244336, 0, ... 01001 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01002 808 NtContinue (1244336, 0, ... 01003 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01004 808 NtContinue (1244336, 0, ... 01005 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01006 808 NtContinue (1244336, 0, ... 01007 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01008 808 NtContinue (1244336, 0, ... 01009 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01010 808 NtContinue (1244336, 0, ... 01011 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01012 808 NtContinue (1244336, 0, ... 01013 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01014 808 NtContinue (1244336, 0, ... 01015 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01016 808 NtContinue (1244336, 0, ... 01017 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01018 808 NtContinue (1244336, 0, ... 01019 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01020 808 NtContinue (1244336, 0, ... 01021 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01022 808 NtContinue (1244336, 0, ... 01023 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01024 808 NtContinue (1244336, 0, ... 01025 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01026 808 NtContinue (1244336, 0, ... 01027 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01028 808 NtContinue (1244336, 0, ... 01029 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01030 808 NtContinue (1244336, 0, ... 01031 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01032 808 NtContinue (1244336, 0, ... 01033 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01034 808 NtContinue (1244336, 0, ... 01035 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01036 808 NtContinue (1244336, 0, ... 01037 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01038 808 NtContinue (1244336, 0, ... 01039 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01040 808 NtContinue (1244336, 0, ... 01041 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01042 808 NtContinue (1244336, 0, ... 01043 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01044 808 NtContinue (1244336, 0, ... 01045 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01046 808 NtContinue (1244336, 0, ... 01047 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01048 808 NtContinue (1244336, 0, ... 01049 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01050 808 NtContinue (1244336, 0, ... 01051 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01052 808 NtContinue (1244336, 0, ... 01053 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01054 808 NtContinue (1244336, 0, ... 01055 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01056 808 NtContinue (1244336, 0, ... 01057 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01058 808 NtContinue (1244336, 0, ... 01059 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01060 808 NtContinue (1244336, 0, ... 01061 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01062 808 NtContinue (1244336, 0, ... 01063 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01064 808 NtContinue (1244336, 0, ... 01065 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01066 808 NtContinue (1244336, 0, ... 01067 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01068 808 NtContinue (1244336, 0, ... 01069 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01070 808 NtContinue (1244336, 0, ... 01071 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01072 808 NtContinue (1244336, 0, ... 01073 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01074 808 NtContinue (1244336, 0, ... 01075 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01076 808 NtContinue (1244336, 0, ... 01077 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01078 808 NtContinue (1244336, 0, ... 01079 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01080 808 NtContinue (1244336, 0, ... 01081 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01082 808 NtContinue (1244336, 0, ... 01083 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01084 808 NtContinue (1244336, 0, ... 01085 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01086 808 NtContinue (1244336, 0, ... 01087 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01088 808 NtContinue (1244336, 0, ... 01089 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01090 808 NtContinue (1244336, 0, ... 01091 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01092 808 NtContinue (1244336, 0, ... 01093 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01094 808 NtContinue (1244336, 0, ... 01095 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01096 808 NtContinue (1244336, 0, ... 01097 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01098 808 NtContinue (1244336, 0, ... 01099 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01100 808 NtContinue (1244336, 0, ... 01101 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01102 808 NtContinue (1244336, 0, ... 01103 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01104 808 NtContinue (1244336, 0, ... 01105 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01106 808 NtContinue (1244336, 0, ... 01107 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01108 808 NtContinue (1244336, 0, ... 01109 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01110 808 NtContinue (1244336, 0, ... 01111 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01112 808 NtContinue (1244336, 0, ... 01113 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01114 808 NtContinue (1244336, 0, ... 01115 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01116 808 NtContinue (1244336, 0, ... 01117 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01118 808 NtContinue (1244336, 0, ... 01119 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01120 808 NtContinue (1244336, 0, ... 01121 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01122 808 NtContinue (1244336, 0, ... 01123 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01124 808 NtContinue (1244336, 0, ... 01125 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01126 808 NtContinue (1244336, 0, ... 01127 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01128 808 NtContinue (1244336, 0, ... 01129 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01130 808 NtContinue (1244336, 0, ... 01131 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01132 808 NtContinue (1244336, 0, ... 01133 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01134 808 NtContinue (1244336, 0, ... 01135 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01136 808 NtContinue (1244336, 0, ... 01137 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01138 808 NtContinue (1244336, 0, ... 01139 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01140 808 NtContinue (1244336, 0, ... 01141 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01142 808 NtContinue (1244336, 0, ... 01143 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01144 808 NtContinue (1244336, 0, ... 01145 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01146 808 NtContinue (1244336, 0, ... 01147 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01148 808 NtContinue (1244336, 0, ... 01149 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01150 808 NtContinue (1244336, 0, ... 01151 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01152 808 NtContinue (1244336, 0, ... 01153 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01154 808 NtContinue (1244336, 0, ... 01155 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01156 808 NtContinue (1244336, 0, ... 01157 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01158 808 NtContinue (1244336, 0, ... 01159 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01160 808 NtContinue (1244336, 0, ... 01161 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01162 808 NtContinue (1244336, 0, ... 01163 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01164 808 NtContinue (1244336, 0, ... 01165 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01166 808 NtContinue (1244336, 0, ... 01167 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01168 808 NtContinue (1244336, 0, ... 01169 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01170 808 NtContinue (1244336, 0, ... 01171 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01172 808 NtContinue (1244336, 0, ... 01173 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01174 808 NtContinue (1244336, 0, ... 01175 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01176 808 NtContinue (1244336, 0, ... 01177 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01178 808 NtContinue (1244336, 0, ... 01179 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01180 808 NtContinue (1244336, 0, ... 01181 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01182 808 NtContinue (1244336, 0, ... 01183 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01184 808 NtContinue (1244336, 0, ... 01185 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01186 808 NtContinue (1244336, 0, ... 01187 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01188 808 NtContinue (1244336, 0, ... 01189 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01190 808 NtContinue (1244336, 0, ... 01191 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01192 808 NtContinue (1244336, 0, ... 01193 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01194 808 NtContinue (1244336, 0, ... 01195 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01196 808 NtContinue (1244336, 0, ... 01197 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01198 808 NtContinue (1244336, 0, ... 01199 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01200 808 NtContinue (1244336, 0, ... 01201 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01202 808 NtContinue (1244336, 0, ... 01203 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01204 808 NtContinue (1244336, 0, ... 01205 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01206 808 NtContinue (1244336, 0, ... 01207 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01208 808 NtContinue (1244336, 0, ... 01209 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01210 808 NtContinue (1244336, 0, ... 01211 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01212 808 NtContinue (1244336, 0, ... 01213 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01214 808 NtContinue (1244336, 0, ... 01215 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01216 808 NtContinue (1244336, 0, ... 01217 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01218 808 NtContinue (1244336, 0, ... 01219 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01220 808 NtContinue (1244336, 0, ... 01221 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01222 808 NtContinue (1244336, 0, ... 01223 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01224 808 NtContinue (1244336, 0, ... 01225 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01226 808 NtContinue (1244336, 0, ... 01227 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01228 808 NtContinue (1244336, 0, ... 01229 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01230 808 NtContinue (1244336, 0, ... 01231 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01232 808 NtContinue (1244336, 0, ... 01233 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01234 808 NtContinue (1244336, 0, ... 01235 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01236 808 NtContinue (1244336, 0, ... 01237 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01238 808 NtContinue (1244336, 0, ... 01239 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01240 808 NtContinue (1244336, 0, ... 01241 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01242 808 NtContinue (1244336, 0, ... 01243 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01244 808 NtContinue (1244336, 0, ... 01245 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01246 808 NtContinue (1244336, 0, ... 01247 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01248 808 NtContinue (1244336, 0, ... 01249 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01250 808 NtContinue (1244336, 0, ... 01251 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01252 808 NtContinue (1244336, 0, ... 01253 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01254 808 NtContinue (1244336, 0, ... 01255 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01256 808 NtContinue (1244336, 0, ... 01257 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01258 808 NtContinue (1244336, 0, ... 01259 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01260 808 NtContinue (1244336, 0, ... 01261 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01262 808 NtContinue (1244336, 0, ... 01263 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01264 808 NtContinue (1244336, 0, ... 01265 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01266 808 NtContinue (1244336, 0, ... 01267 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01268 808 NtContinue (1244336, 0, ... 01269 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01270 808 NtContinue (1244336, 0, ... 01271 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01272 808 NtContinue (1244336, 0, ... 01273 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01274 808 NtContinue (1244336, 0, ... 01275 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01276 808 NtContinue (1244336, 0, ... 01277 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01278 808 NtContinue (1244336, 0, ... 01279 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01280 808 NtContinue (1244336, 0, ... 01281 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01282 808 NtContinue (1244336, 0, ... 01283 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01284 808 NtContinue (1244336, 0, ... 01285 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01286 808 NtContinue (1244336, 0, ... 01287 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01288 808 NtContinue (1244336, 0, ... 01289 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01290 808 NtContinue (1244336, 0, ... 01291 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01292 808 NtContinue (1244336, 0, ... 01293 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01294 808 NtContinue (1244336, 0, ... 01295 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01296 808 NtContinue (1244336, 0, ... 01297 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01298 808 NtContinue (1244336, 0, ... 01299 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01300 808 NtContinue (1244336, 0, ... 01301 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01302 808 NtContinue (1244336, 0, ... 01303 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01304 808 NtContinue (1244336, 0, ... 01305 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01306 808 NtContinue (1244336, 0, ... 01307 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01308 808 NtContinue (1244336, 0, ... 01309 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01310 808 NtContinue (1244336, 0, ... 01311 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01312 808 NtContinue (1244336, 0, ... 01313 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01314 808 NtContinue (1244336, 0, ... 01315 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01316 808 NtContinue (1244336, 0, ... 01317 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01318 808 NtContinue (1244336, 0, ... 01319 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01320 808 NtContinue (1244336, 0, ... 01321 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01322 808 NtContinue (1244336, 0, ... 01323 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01324 808 NtContinue (1244336, 0, ... 01325 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01326 808 NtContinue (1244336, 0, ... 01327 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01328 808 NtContinue (1244336, 0, ... 01329 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01330 808 NtContinue (1244336, 0, ... 01331 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01332 808 NtContinue (1244336, 0, ... 01333 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01334 808 NtContinue (1244336, 0, ... 01335 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01336 808 NtContinue (1244336, 0, ... 01337 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01338 808 NtContinue (1244336, 0, ... 01339 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01340 808 NtContinue (1244336, 0, ... 01341 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01342 808 NtContinue (1244336, 0, ... 01343 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01344 808 NtContinue (1244336, 0, ... 01345 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01346 808 NtContinue (1244336, 0, ... 01347 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01348 808 NtContinue (1244336, 0, ... 01349 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01350 808 NtContinue (1244336, 0, ... 01351 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01352 808 NtContinue (1244336, 0, ... 01353 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01354 808 NtContinue (1244336, 0, ... 01355 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01356 808 NtContinue (1244336, 0, ... 01357 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01358 808 NtContinue (1244336, 0, ... 01359 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01360 808 NtContinue (1244336, 0, ... 01361 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01362 808 NtContinue (1244336, 0, ... 01363 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01364 808 NtContinue (1244336, 0, ... 01365 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01366 808 NtContinue (1244336, 0, ... 01367 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01368 808 NtContinue (1244336, 0, ... 01369 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01370 808 NtContinue (1244336, 0, ... 01371 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01372 808 NtContinue (1244336, 0, ... 01373 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01374 808 NtContinue (1244336, 0, ... 01375 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01376 808 NtContinue (1244336, 0, ... 01377 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01378 808 NtContinue (1244336, 0, ... 01379 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01380 808 NtContinue (1244336, 0, ... 01381 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01382 808 NtContinue (1244336, 0, ... 01383 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01384 808 NtContinue (1244336, 0, ... 01385 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01386 808 NtContinue (1244336, 0, ... 01387 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01388 808 NtContinue (1244336, 0, ... 01389 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01390 808 NtContinue (1244336, 0, ... 01391 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01392 808 NtContinue (1244336, 0, ... 01393 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01394 808 NtContinue (1244336, 0, ... 01395 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01396 808 NtContinue (1244336, 0, ... 01397 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01398 808 NtContinue (1244336, 0, ... 01399 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01400 808 NtContinue (1244336, 0, ... 01401 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01402 808 NtContinue (1244336, 0, ... 01403 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01404 808 NtContinue (1244336, 0, ... 01405 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01406 808 NtContinue (1244336, 0, ... 01407 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01408 808 NtContinue (1244336, 0, ... 01409 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01410 808 NtContinue (1244336, 0, ... 01411 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01412 808 NtContinue (1244336, 0, ... 01413 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01414 808 NtContinue (1244336, 0, ... 01415 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01416 808 NtContinue (1244336, 0, ... 01417 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01418 808 NtContinue (1244336, 0, ... 01419 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01420 808 NtContinue (1244336, 0, ... 01421 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01422 808 NtContinue (1244336, 0, ... 01423 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01424 808 NtContinue (1244336, 0, ... 01425 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01426 808 NtContinue (1244336, 0, ... 01427 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01428 808 NtContinue (1244336, 0, ... 01429 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01430 808 NtContinue (1244336, 0, ... 01431 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01432 808 NtContinue (1244336, 0, ... 01433 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01434 808 NtContinue (1244336, 0, ... 01435 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01436 808 NtContinue (1244336, 0, ... 01437 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01438 808 NtContinue (1244336, 0, ... 01439 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01440 808 NtContinue (1244336, 0, ... 01441 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01442 808 NtContinue (1244336, 0, ... 01443 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01444 808 NtContinue (1244336, 0, ... 01445 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01446 808 NtContinue (1244336, 0, ... 01447 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01448 808 NtContinue (1244336, 0, ... 01449 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01450 808 NtContinue (1244336, 0, ... 01451 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01452 808 NtContinue (1244336, 0, ... 01453 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01454 808 NtContinue (1244336, 0, ... 01455 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01456 808 NtContinue (1244336, 0, ... 01457 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01458 808 NtContinue (1244336, 0, ... 01459 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01460 808 NtContinue (1244336, 0, ... 01461 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01462 808 NtContinue (1244336, 0, ... 01463 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01464 808 NtContinue (1244336, 0, ... 01465 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01466 808 NtContinue (1244336, 0, ... 01467 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01468 808 NtContinue (1244336, 0, ... 01469 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01470 808 NtContinue (1244336, 0, ... 01471 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01472 808 NtContinue (1244336, 0, ... 01473 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01474 808 NtContinue (1244336, 0, ... 01475 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01476 808 NtContinue (1244336, 0, ... 01477 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01478 808 NtContinue (1244336, 0, ... 01479 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01480 808 NtContinue (1244336, 0, ... 01481 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01482 808 NtContinue (1244336, 0, ... 01483 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01484 808 NtContinue (1244336, 0, ... 01485 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01486 808 NtContinue (1244336, 0, ... 01487 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01488 808 NtContinue (1244336, 0, ... 01489 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01490 808 NtContinue (1244336, 0, ... 01491 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01492 808 NtContinue (1244336, 0, ... 01493 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01494 808 NtContinue (1244336, 0, ... 01495 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01496 808 NtContinue (1244336, 0, ... 01497 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01498 808 NtContinue (1244336, 0, ... 01499 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01500 808 NtContinue (1244336, 0, ... 01501 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01502 808 NtContinue (1244336, 0, ... 01503 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01504 808 NtContinue (1244336, 0, ... 01505 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01506 808 NtContinue (1244336, 0, ... 01507 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01508 808 NtContinue (1244336, 0, ... 01509 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01510 808 NtContinue (1244336, 0, ... 01511 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01512 808 NtContinue (1244336, 0, ... 01513 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01514 808 NtContinue (1244336, 0, ... 01515 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01516 808 NtContinue (1244336, 0, ... 01517 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01518 808 NtContinue (1244336, 0, ... 01519 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01520 808 NtContinue (1244336, 0, ... 01521 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01522 808 NtContinue (1244336, 0, ... 01523 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01524 808 NtContinue (1244336, 0, ... 01525 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01526 808 NtContinue (1244336, 0, ... 01527 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01528 808 NtContinue (1244336, 0, ... 01529 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01530 808 NtContinue (1244336, 0, ... 01531 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01532 808 NtContinue (1244336, 0, ... 01533 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01534 808 NtContinue (1244336, 0, ... 01535 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01536 808 NtContinue (1244336, 0, ... 01537 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01538 808 NtContinue (1244336, 0, ... 01539 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01540 808 NtContinue (1244336, 0, ... 01541 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01542 808 NtContinue (1244336, 0, ... 01543 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01544 808 NtContinue (1244336, 0, ... 01545 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01546 808 NtContinue (1244336, 0, ... 01547 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01548 808 NtContinue (1244336, 0, ... 01549 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01550 808 NtContinue (1244336, 0, ... 01551 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01552 808 NtContinue (1244336, 0, ... 01553 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01554 808 NtContinue (1244336, 0, ... 01555 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01556 808 NtContinue (1244336, 0, ... 01557 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01558 808 NtContinue (1244336, 0, ... 01559 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01560 808 NtContinue (1244336, 0, ... 01561 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01562 808 NtContinue (1244336, 0, ... 01563 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01564 808 NtContinue (1244336, 0, ... 01565 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01566 808 NtContinue (1244336, 0, ... 01567 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01568 808 NtContinue (1244336, 0, ... 01569 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01570 808 NtContinue (1244336, 0, ... 01571 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01572 808 NtContinue (1244336, 0, ... 01573 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01574 808 NtContinue (1244336, 0, ... 01575 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01576 808 NtContinue (1244336, 0, ... 01577 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01578 808 NtContinue (1244336, 0, ... 01579 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01580 808 NtContinue (1244336, 0, ... 01581 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01582 808 NtContinue (1244336, 0, ... 01583 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01584 808 NtContinue (1244336, 0, ... 01585 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01586 808 NtContinue (1244336, 0, ... 01587 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01588 808 NtContinue (1244336, 0, ... 01589 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01590 808 NtContinue (1244336, 0, ... 01591 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01592 808 NtContinue (1244336, 0, ... 01593 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01594 808 NtContinue (1244336, 0, ... 01595 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01596 808 NtContinue (1244336, 0, ... 01597 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01598 808 NtContinue (1244336, 0, ... 01599 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01600 808 NtContinue (1244336, 0, ... 01601 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01602 808 NtContinue (1244336, 0, ... 01603 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01604 808 NtContinue (1244336, 0, ... 01605 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01606 808 NtContinue (1244336, 0, ... 01607 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01608 808 NtContinue (1244336, 0, ... 01609 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01610 808 NtContinue (1244336, 0, ... 01611 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01612 808 NtContinue (1244336, 0, ... 01613 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01614 808 NtContinue (1244336, 0, ... 01615 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01616 808 NtContinue (1244336, 0, ... 01617 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01618 808 NtContinue (1244336, 0, ... 01619 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01620 808 NtContinue (1244336, 0, ... 01621 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01622 808 NtContinue (1244336, 0, ... 01623 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01624 808 NtContinue (1244336, 0, ... 01625 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01626 808 NtContinue (1244336, 0, ... 01627 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01628 808 NtContinue (1244336, 0, ... 01629 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01630 808 NtContinue (1244336, 0, ... 01631 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01632 808 NtContinue (1244336, 0, ... 01633 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01634 808 NtContinue (1244336, 0, ... 01635 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01636 808 NtContinue (1244336, 0, ... 01637 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01638 808 NtContinue (1244336, 0, ... 01639 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01640 808 NtContinue (1244336, 0, ... 01641 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01642 808 NtContinue (1244336, 0, ... 01643 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01644 808 NtContinue (1244336, 0, ... 01645 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01646 808 NtContinue (1244336, 0, ... 01647 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01648 808 NtContinue (1244336, 0, ... 01649 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01650 808 NtContinue (1244336, 0, ... 01651 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01652 808 NtContinue (1244336, 0, ... 01653 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01654 808 NtContinue (1244336, 0, ... 01655 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01656 808 NtContinue (1244336, 0, ... 01657 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01658 808 NtContinue (1244336, 0, ... 01659 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01660 808 NtContinue (1244336, 0, ... 01661 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01662 808 NtContinue (1244336, 0, ... 01663 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01664 808 NtContinue (1244336, 0, ... 01665 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01666 808 NtContinue (1244336, 0, ... 01667 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01668 808 NtContinue (1244336, 0, ... 01669 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01670 808 NtContinue (1244336, 0, ... 01671 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01672 808 NtContinue (1244336, 0, ... 01673 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01674 808 NtContinue (1244336, 0, ... 01675 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01676 808 NtContinue (1244336, 0, ... 01677 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01678 808 NtContinue (1244336, 0, ... 01679 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01680 808 NtContinue (1244336, 0, ... 01681 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01682 808 NtContinue (1244336, 0, ... 01683 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01684 808 NtContinue (1244336, 0, ... 01685 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01686 808 NtContinue (1244336, 0, ... 01687 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01688 808 NtContinue (1244336, 0, ... 01689 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01690 808 NtContinue (1244336, 0, ... 01691 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01692 808 NtContinue (1244336, 0, ... 01693 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01694 808 NtContinue (1244336, 0, ... 01695 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01696 808 NtContinue (1244336, 0, ... 01697 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01698 808 NtContinue (1244336, 0, ... 01699 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01700 808 NtContinue (1244336, 0, ... 01701 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01702 808 NtContinue (1244336, 0, ... 01703 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01704 808 NtContinue (1244336, 0, ... 01705 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01706 808 NtContinue (1244336, 0, ... 01707 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01708 808 NtContinue (1244336, 0, ... 01709 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01710 808 NtContinue (1244336, 0, ... 01711 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01712 808 NtContinue (1244336, 0, ... 01713 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01714 808 NtContinue (1244336, 0, ... 01715 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01716 808 NtContinue (1244336, 0, ... 01717 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01718 808 NtContinue (1244336, 0, ... 01719 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01720 808 NtContinue (1244336, 0, ... 01721 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01722 808 NtContinue (1244336, 0, ... 01723 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01724 808 NtContinue (1244336, 0, ... 01725 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01726 808 NtContinue (1244336, 0, ... 01727 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01728 808 NtContinue (1244336, 0, ... 01729 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01730 808 NtContinue (1244336, 0, ... 01731 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01732 808 NtContinue (1244336, 0, ... 01733 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01734 808 NtContinue (1244336, 0, ... 01735 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01736 808 NtContinue (1244336, 0, ... 01737 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01738 808 NtContinue (1244336, 0, ... 01739 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01740 808 NtContinue (1244336, 0, ... 01741 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01742 808 NtContinue (1244336, 0, ... 01743 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01744 808 NtContinue (1244336, 0, ... 01745 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01746 808 NtContinue (1244336, 0, ... 01747 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01748 808 NtContinue (1244336, 0, ... 01749 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01750 808 NtContinue (1244336, 0, ... 01751 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01752 808 NtContinue (1244336, 0, ... 01753 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01754 808 NtContinue (1244336, 0, ... 01755 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01756 808 NtContinue (1244336, 0, ... 01757 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01758 808 NtContinue (1244336, 0, ... 01759 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01760 808 NtContinue (1244336, 0, ... 01761 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01762 808 NtContinue (1244336, 0, ... 01763 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01764 808 NtContinue (1244336, 0, ... 01765 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01766 808 NtContinue (1244336, 0, ... 01767 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01768 808 NtContinue (1244336, 0, ... 01769 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01770 808 NtContinue (1244336, 0, ... 01771 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01772 808 NtContinue (1244336, 0, ... 01773 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01774 808 NtContinue (1244336, 0, ... 01775 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01776 808 NtContinue (1244336, 0, ... 01777 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01778 808 NtContinue (1244336, 0, ... 01779 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01780 808 NtContinue (1244336, 0, ... 01781 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01782 808 NtContinue (1244336, 0, ... 01783 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01784 808 NtContinue (1244336, 0, ... 01785 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01786 808 NtContinue (1244336, 0, ... 01787 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01788 808 NtContinue (1244336, 0, ... 01789 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01790 808 NtContinue (1244336, 0, ... 01791 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01792 808 NtContinue (1244336, 0, ... 01793 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01794 808 NtContinue (1244336, 0, ... 01795 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01796 808 NtContinue (1244336, 0, ... 01797 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01798 808 NtContinue (1244336, 0, ... 01799 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01800 808 NtContinue (1244336, 0, ... 01801 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01802 808 NtContinue (1244336, 0, ... 01803 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01804 808 NtContinue (1244336, 0, ... 01805 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01806 808 NtContinue (1244336, 0, ... 01807 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01808 808 NtContinue (1244336, 0, ... 01809 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01810 808 NtContinue (1244336, 0, ... 01811 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01812 808 NtContinue (1244336, 0, ... 01813 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01814 808 NtContinue (1244336, 0, ... 01815 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01816 808 NtContinue (1244336, 0, ... 01817 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01818 808 NtContinue (1244336, 0, ... 01819 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01820 808 NtContinue (1244336, 0, ... 01821 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01822 808 NtContinue (1244336, 0, ... 01823 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01824 808 NtContinue (1244336, 0, ... 01825 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01826 808 NtContinue (1244336, 0, ... 01827 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01828 808 NtContinue (1244336, 0, ... 01829 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01830 808 NtContinue (1244336, 0, ... 01831 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01832 808 NtContinue (1244336, 0, ... 01833 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01834 808 NtContinue (1244336, 0, ... 01835 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01836 808 NtContinue (1244336, 0, ... 01837 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01838 808 NtContinue (1244336, 0, ... 01839 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01840 808 NtContinue (1244336, 0, ... 01841 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01842 808 NtContinue (1244336, 0, ... 01843 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01844 808 NtContinue (1244336, 0, ... 01845 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01846 808 NtContinue (1244336, 0, ... 01847 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01848 808 NtContinue (1244336, 0, ... 01849 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01850 808 NtContinue (1244336, 0, ... 01851 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01852 808 NtContinue (1244336, 0, ... 01853 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01854 808 NtContinue (1244336, 0, ... 01855 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01856 808 NtContinue (1244336, 0, ... 01857 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01858 808 NtContinue (1244336, 0, ... 01859 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01860 808 NtContinue (1244336, 0, ... 01861 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01862 808 NtContinue (1244336, 0, ... 01863 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01864 808 NtContinue (1244336, 0, ... 01865 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01866 808 NtContinue (1244336, 0, ... 01867 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01868 808 NtContinue (1244336, 0, ... 01869 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01870 808 NtContinue (1244336, 0, ... 01871 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01872 808 NtContinue (1244336, 0, ... 01873 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01874 808 NtContinue (1244336, 0, ... 01875 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01876 808 NtContinue (1244336, 0, ... 01877 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01878 808 NtContinue (1244336, 0, ... 01879 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01880 808 NtContinue (1244336, 0, ... 01881 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01882 808 NtContinue (1244336, 0, ... 01883 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01884 808 NtContinue (1244336, 0, ... 01885 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01886 808 NtContinue (1244336, 0, ... 01887 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01888 808 NtContinue (1244336, 0, ... 01889 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01890 808 NtContinue (1244336, 0, ... 01891 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01892 808 NtContinue (1244336, 0, ... 01893 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01894 808 NtContinue (1244336, 0, ... 01895 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01896 808 NtContinue (1244336, 0, ... 01897 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01898 808 NtContinue (1244336, 0, ... 01899 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01900 808 NtContinue (1244336, 0, ... 01901 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01902 808 NtContinue (1244336, 0, ... 01903 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01904 808 NtContinue (1244336, 0, ... 01905 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01906 808 NtContinue (1244336, 0, ... 01907 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01908 808 NtContinue (1244336, 0, ... 01909 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01910 808 NtContinue (1244336, 0, ... 01911 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01912 808 NtContinue (1244336, 0, ... 01913 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01914 808 NtContinue (1244336, 0, ... 01915 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01916 808 NtContinue (1244336, 0, ... 01917 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01918 808 NtContinue (1244336, 0, ... 01919 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01920 808 NtContinue (1244336, 0, ... 01921 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01922 808 NtContinue (1244336, 0, ... 01923 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01924 808 NtContinue (1244336, 0, ... 01925 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01926 808 NtContinue (1244336, 0, ... 01927 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01928 808 NtContinue (1244336, 0, ... 01929 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01930 808 NtContinue (1244336, 0, ... 01931 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01932 808 NtContinue (1244336, 0, ... 01933 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01934 808 NtContinue (1244336, 0, ... 01935 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01936 808 NtContinue (1244336, 0, ... 01937 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01938 808 NtContinue (1244336, 0, ... 01939 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01940 808 NtContinue (1244336, 0, ... 01941 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01942 808 NtContinue (1244336, 0, ... 01943 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01944 808 NtContinue (1244336, 0, ... 01945 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01946 808 NtContinue (1244336, 0, ... 01947 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01948 808 NtContinue (1244336, 0, ... 01949 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01950 808 NtContinue (1244336, 0, ... 01951 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01952 808 NtContinue (1244336, 0, ... 01953 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01954 808 NtContinue (1244336, 0, ... 01955 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01956 808 NtContinue (1244336, 0, ... 01957 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01958 808 NtContinue (1244336, 0, ... 01959 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01960 808 NtContinue (1244336, 0, ... 01961 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01962 808 NtContinue (1244336, 0, ... 01963 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01964 808 NtContinue (1244336, 0, ... 01965 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01966 808 NtContinue (1244336, 0, ... 01967 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01968 808 NtContinue (1244336, 0, ... 01969 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01970 808 NtContinue (1244336, 0, ... 01971 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01972 808 NtContinue (1244336, 0, ... 01973 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01974 808 NtContinue (1244336, 0, ... 01975 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01976 808 NtContinue (1244336, 0, ... 01977 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01978 808 NtContinue (1244336, 0, ... 01979 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01980 808 NtContinue (1244336, 0, ... 01981 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01982 808 NtContinue (1244336, 0, ... 01983 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01984 808 NtContinue (1244336, 0, ... 01985 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01986 808 NtContinue (1244336, 0, ... 01987 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01988 808 NtContinue (1244336, 0, ... 01989 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01990 808 NtContinue (1244336, 0, ... 01991 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01992 808 NtContinue (1244336, 0, ... 01993 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01994 808 NtContinue (1244336, 0, ... 01995 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01996 808 NtContinue (1244336, 0, ... 01997 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01998 808 NtContinue (1244336, 0, ... 01999 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02000 808 NtContinue (1244336, 0, ... 02001 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02002 808 NtContinue (1244336, 0, ... 02003 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02004 808 NtContinue (1244336, 0, ... 02005 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02006 808 NtContinue (1244336, 0, ... 02007 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02008 808 NtContinue (1244336, 0, ... 02009 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02010 808 NtContinue (1244336, 0, ... 02011 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02012 808 NtContinue (1244336, 0, ... 02013 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02014 808 NtContinue (1244336, 0, ... 02015 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02016 808 NtContinue (1244336, 0, ... 02017 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02018 808 NtContinue (1244336, 0, ... 02019 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02020 808 NtContinue (1244336, 0, ... 02021 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02022 808 NtContinue (1244336, 0, ... 02023 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02024 808 NtContinue (1244336, 0, ... 02025 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02026 808 NtContinue (1244336, 0, ... 02027 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02028 808 NtContinue (1244336, 0, ... 02029 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02030 808 NtContinue (1244336, 0, ... 02031 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02032 808 NtContinue (1244336, 0, ... 02033 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02034 808 NtContinue (1244336, 0, ... 02035 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02036 808 NtContinue (1244336, 0, ... 02037 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02038 808 NtContinue (1244336, 0, ... 02039 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02040 808 NtContinue (1244336, 0, ... 02041 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02042 808 NtContinue (1244336, 0, ... 02043 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02044 808 NtContinue (1244336, 0, ... 02045 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02046 808 NtContinue (1244336, 0, ... 02047 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02048 808 NtContinue (1244336, 0, ... 02049 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02050 808 NtContinue (1244336, 0, ... 02051 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02052 808 NtContinue (1244336, 0, ... 02053 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02054 808 NtContinue (1244336, 0, ... 02055 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02056 808 NtContinue (1244336, 0, ... 02057 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02058 808 NtContinue (1244336, 0, ... 02059 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02060 808 NtContinue (1244336, 0, ... 02061 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02062 808 NtContinue (1244336, 0, ... 02063 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02064 808 NtContinue (1244336, 0, ... 02065 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02066 808 NtContinue (1244336, 0, ... 02067 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02068 808 NtContinue (1244336, 0, ... 02069 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02070 808 NtContinue (1244336, 0, ... 02071 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02072 808 NtContinue (1244336, 0, ... 02073 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02074 808 NtContinue (1244336, 0, ... 02075 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02076 808 NtContinue (1244336, 0, ... 02077 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02078 808 NtContinue (1244336, 0, ... 02079 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02080 808 NtContinue (1244336, 0, ... 02081 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02082 808 NtContinue (1244336, 0, ... 02083 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02084 808 NtContinue (1244336, 0, ... 02085 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02086 808 NtContinue (1244336, 0, ... 02087 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02088 808 NtContinue (1244336, 0, ... 02089 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02090 808 NtContinue (1244336, 0, ... 02091 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02092 808 NtContinue (1244336, 0, ... 02093 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02094 808 NtContinue (1244336, 0, ... 02095 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02096 808 NtContinue (1244336, 0, ... 02097 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02098 808 NtContinue (1244336, 0, ... 02099 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02100 808 NtContinue (1244336, 0, ... 02101 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02102 808 NtContinue (1244336, 0, ... 02103 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02104 808 NtContinue (1244336, 0, ... 02105 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02106 808 NtContinue (1244336, 0, ... 02107 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02108 808 NtContinue (1244336, 0, ... 02109 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02110 808 NtContinue (1244336, 0, ... 02111 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02112 808 NtContinue (1244336, 0, ... 02113 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02114 808 NtContinue (1244336, 0, ... 02115 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02116 808 NtContinue (1244336, 0, ... 02117 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02118 808 NtContinue (1244336, 0, ... 02119 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02120 808 NtContinue (1244336, 0, ... 02121 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02122 808 NtContinue (1244336, 0, ... 02123 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02124 808 NtContinue (1244336, 0, ... 02125 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02126 808 NtContinue (1244336, 0, ... 02127 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02128 808 NtContinue (1244336, 0, ... 02129 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02130 808 NtContinue (1244336, 0, ... 02131 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02132 808 NtContinue (1244336, 0, ... 02133 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02134 808 NtContinue (1244336, 0, ... 02135 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02136 808 NtContinue (1244336, 0, ... 02137 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02138 808 NtContinue (1244336, 0, ... 02139 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02140 808 NtContinue (1244336, 0, ... 02141 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02142 808 NtContinue (1244336, 0, ... 02143 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02144 808 NtContinue (1244336, 0, ... 02145 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02146 808 NtContinue (1244336, 0, ... 02147 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02148 808 NtContinue (1244336, 0, ... 02149 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02150 808 NtContinue (1244336, 0, ... 02151 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02152 808 NtContinue (1244336, 0, ... 02153 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02154 808 NtContinue (1244336, 0, ... 02155 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02156 808 NtContinue (1244336, 0, ... 02157 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02158 808 NtContinue (1244336, 0, ... 02159 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02160 808 NtContinue (1244336, 0, ... 02161 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02162 808 NtContinue (1244336, 0, ... 02163 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02164 808 NtContinue (1244336, 0, ... 02165 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02166 808 NtContinue (1244336, 0, ... 02167 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02168 808 NtContinue (1244336, 0, ... 02169 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02170 808 NtContinue (1244336, 0, ... 02171 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02172 808 NtContinue (1244336, 0, ... 02173 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02174 808 NtContinue (1244336, 0, ... 02175 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02176 808 NtContinue (1244336, 0, ... 02177 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02178 808 NtContinue (1244336, 0, ... 02179 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02180 808 NtContinue (1244336, 0, ... 02181 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02182 808 NtContinue (1244336, 0, ... 02183 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02184 808 NtContinue (1244336, 0, ... 02185 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02186 808 NtContinue (1244336, 0, ... 02187 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02188 808 NtContinue (1244336, 0, ... 02189 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02190 808 NtContinue (1244336, 0, ... 02191 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02192 808 NtContinue (1244336, 0, ... 02193 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02194 808 NtContinue (1244336, 0, ... 02195 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02196 808 NtContinue (1244336, 0, ... 02197 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02198 808 NtContinue (1244336, 0, ... 02199 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02200 808 NtContinue (1244336, 0, ... 02201 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02202 808 NtContinue (1244336, 0, ... 02203 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02204 808 NtContinue (1244336, 0, ... 02205 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02206 808 NtContinue (1244336, 0, ... 02207 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02208 808 NtContinue (1244336, 0, ... 02209 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02210 808 NtContinue (1244336, 0, ... 02211 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02212 808 NtContinue (1244336, 0, ... 02213 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02214 808 NtContinue (1244336, 0, ... 02215 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02216 808 NtContinue (1244336, 0, ... 02217 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02218 808 NtContinue (1244336, 0, ... 02219 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02220 808 NtContinue (1244336, 0, ... 02221 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02222 808 NtContinue (1244336, 0, ... 02223 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02224 808 NtContinue (1244336, 0, ... 02225 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02226 808 NtContinue (1244336, 0, ... 02227 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02228 808 NtContinue (1244336, 0, ... 02229 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02230 808 NtContinue (1244336, 0, ... 02231 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02232 808 NtContinue (1244336, 0, ... 02233 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02234 808 NtContinue (1244336, 0, ... 02235 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02236 808 NtContinue (1244336, 0, ... 02237 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02238 808 NtContinue (1244336, 0, ... 02239 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02240 808 NtContinue (1244336, 0, ... 02241 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02242 808 NtContinue (1244336, 0, ... 02243 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02244 808 NtContinue (1244336, 0, ... 02245 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02246 808 NtContinue (1244336, 0, ... 02247 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02248 808 NtContinue (1244336, 0, ... 02249 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02250 808 NtContinue (1244336, 0, ... 02251 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02252 808 NtContinue (1244336, 0, ... 02253 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02254 808 NtContinue (1244336, 0, ... 02255 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02256 808 NtContinue (1244336, 0, ... 02257 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02258 808 NtContinue (1244336, 0, ... 02259 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02260 808 NtContinue (1244336, 0, ... 02261 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02262 808 NtContinue (1244336, 0, ... 02263 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02264 808 NtContinue (1244336, 0, ... 02265 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02266 808 NtContinue (1244336, 0, ... 02267 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02268 808 NtContinue (1244336, 0, ... 02269 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02270 808 NtContinue (1244336, 0, ... 02271 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02272 808 NtContinue (1244336, 0, ... 02273 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02274 808 NtContinue (1244336, 0, ... 02275 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02276 808 NtContinue (1244336, 0, ... 02277 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02278 808 NtContinue (1244336, 0, ... 02279 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02280 808 NtContinue (1244336, 0, ... 02281 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02282 808 NtContinue (1244336, 0, ... 02283 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02284 808 NtContinue (1244336, 0, ... 02285 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02286 808 NtContinue (1244336, 0, ... 02287 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02288 808 NtContinue (1244336, 0, ... 02289 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02290 808 NtContinue (1244336, 0, ... 02291 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02292 808 NtContinue (1244336, 0, ... 02293 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02294 808 NtContinue (1244336, 0, ... 02295 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02296 808 NtContinue (1244336, 0, ... 02297 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02298 808 NtContinue (1244336, 0, ... 02299 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02300 808 NtContinue (1244336, 0, ... 02301 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02302 808 NtContinue (1244336, 0, ... 02303 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02304 808 NtContinue (1244336, 0, ... 02305 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02306 808 NtContinue (1244336, 0, ... 02307 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02308 808 NtContinue (1244336, 0, ... 02309 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02310 808 NtContinue (1244336, 0, ... 02311 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02312 808 NtContinue (1244336, 0, ... 02313 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02314 808 NtContinue (1244336, 0, ... 02315 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02316 808 NtContinue (1244336, 0, ... 02317 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02318 808 NtContinue (1244336, 0, ... 02319 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02320 808 NtContinue (1244336, 0, ... 02321 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02322 808 NtContinue (1244336, 0, ... 02323 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02324 808 NtContinue (1244336, 0, ... 02325 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02326 808 NtContinue (1244336, 0, ... 02327 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02328 808 NtContinue (1244336, 0, ... 02329 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02330 808 NtContinue (1244336, 0, ... 02331 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02332 808 NtContinue (1244336, 0, ... 02333 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02334 808 NtContinue (1244336, 0, ... 02335 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02336 808 NtContinue (1244336, 0, ... 02337 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02338 808 NtContinue (1244336, 0, ... 02339 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02340 808 NtContinue (1244336, 0, ... 02341 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02342 808 NtContinue (1244336, 0, ... 02343 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02344 808 NtContinue (1244336, 0, ... 02345 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02346 808 NtContinue (1244336, 0, ... 02347 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02348 808 NtContinue (1244336, 0, ... 02349 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02350 808 NtContinue (1244336, 0, ... 02351 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02352 808 NtContinue (1244336, 0, ... 02353 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02354 808 NtContinue (1244336, 0, ... 02355 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02356 808 NtContinue (1244336, 0, ... 02357 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02358 808 NtContinue (1244336, 0, ... 02359 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02360 808 NtContinue (1244336, 0, ... 02361 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02362 808 NtContinue (1244336, 0, ... 02363 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02364 808 NtContinue (1244336, 0, ... 02365 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02366 808 NtContinue (1244336, 0, ... 02367 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02368 808 NtContinue (1244336, 0, ... 02369 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02370 808 NtContinue (1244336, 0, ... 02371 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02372 808 NtContinue (1244336, 0, ... 02373 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02374 808 NtContinue (1244336, 0, ... 02375 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02376 808 NtContinue (1244336, 0, ... 02377 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02378 808 NtContinue (1244336, 0, ... 02379 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02380 808 NtContinue (1244336, 0, ... 02381 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02382 808 NtContinue (1244336, 0, ... 02383 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02384 808 NtContinue (1244336, 0, ... 02385 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02386 808 NtContinue (1244336, 0, ... 02387 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02388 808 NtContinue (1244336, 0, ... 02389 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02390 808 NtContinue (1244336, 0, ... 02391 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02392 808 NtContinue (1244336, 0, ... 02393 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02394 808 NtContinue (1244336, 0, ... 02395 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02396 808 NtContinue (1244336, 0, ... 02397 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02398 808 NtContinue (1244336, 0, ... 02399 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02400 808 NtContinue (1244336, 0, ... 02401 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02402 808 NtContinue (1244336, 0, ... 02403 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02404 808 NtContinue (1244336, 0, ... 02405 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02406 808 NtContinue (1244336, 0, ... 02407 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02408 808 NtContinue (1244336, 0, ... 02409 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02410 808 NtContinue (1244336, 0, ... 02411 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02412 808 NtContinue (1244336, 0, ... 02413 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02414 808 NtContinue (1244336, 0, ... 02415 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02416 808 NtContinue (1244336, 0, ... 02417 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02418 808 NtContinue (1244336, 0, ... 02419 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02420 808 NtContinue (1244336, 0, ... 02421 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02422 808 NtContinue (1244336, 0, ... 02423 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02424 808 NtContinue (1244336, 0, ... 02425 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02426 808 NtContinue (1244336, 0, ... 02427 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02428 808 NtContinue (1244336, 0, ... 02429 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02430 808 NtContinue (1244336, 0, ... 02431 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02432 808 NtContinue (1244336, 0, ... 02433 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02434 808 NtContinue (1244336, 0, ... 02435 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02436 808 NtContinue (1244336, 0, ... 02437 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02438 808 NtContinue (1244336, 0, ... 02439 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02440 808 NtContinue (1244336, 0, ... 02441 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02442 808 NtContinue (1244336, 0, ... 02443 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02444 808 NtContinue (1244336, 0, ... 02445 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02446 808 NtContinue (1244336, 0, ... 02447 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02448 808 NtContinue (1244336, 0, ... 02449 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02450 808 NtContinue (1244336, 0, ... 02451 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02452 808 NtContinue (1244336, 0, ... 02453 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02454 808 NtContinue (1244336, 0, ... 02455 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02456 808 NtContinue (1244336, 0, ... 02457 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02458 808 NtContinue (1244336, 0, ... 02459 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02460 808 NtContinue (1244336, 0, ... 02461 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02462 808 NtContinue (1244336, 0, ... 02463 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02464 808 NtContinue (1244336, 0, ... 02465 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02466 808 NtContinue (1244336, 0, ... 02467 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02468 808 NtContinue (1244336, 0, ... 02469 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02470 808 NtContinue (1244336, 0, ... 02471 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02472 808 NtContinue (1244336, 0, ... 02473 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02474 808 NtContinue (1244336, 0, ... 02475 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02476 808 NtContinue (1244336, 0, ... 02477 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02478 808 NtContinue (1244336, 0, ... 02479 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02480 808 NtContinue (1244336, 0, ... 02481 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02482 808 NtContinue (1244336, 0, ... 02483 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02484 808 NtContinue (1244336, 0, ... 02485 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02486 808 NtContinue (1244336, 0, ... 02487 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02488 808 NtContinue (1244336, 0, ... 02489 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02490 808 NtContinue (1244336, 0, ... 02491 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02492 808 NtContinue (1244336, 0, ... 02493 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02494 808 NtContinue (1244336, 0, ... 02495 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02496 808 NtContinue (1244336, 0, ... 02497 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02498 808 NtContinue (1244336, 0, ... 02499 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02500 808 NtContinue (1244336, 0, ... 02501 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02502 808 NtContinue (1244336, 0, ... 02503 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02504 808 NtContinue (1244336, 0, ... 02505 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02506 808 NtContinue (1244336, 0, ... 02507 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02508 808 NtContinue (1244336, 0, ... 02509 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02510 808 NtContinue (1244336, 0, ... 02511 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02512 808 NtContinue (1244336, 0, ... 02513 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02514 808 NtContinue (1244336, 0, ... 02515 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02516 808 NtContinue (1244336, 0, ... 02517 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02518 808 NtContinue (1244336, 0, ... 02519 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02520 808 NtContinue (1244336, 0, ... 02521 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02522 808 NtContinue (1244336, 0, ... 02523 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02524 808 NtContinue (1244336, 0, ... 02525 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02526 808 NtContinue (1244336, 0, ... 02527 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02528 808 NtContinue (1244336, 0, ... 02529 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02530 808 NtContinue (1244336, 0, ... 02531 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02532 808 NtContinue (1244336, 0, ... 02533 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02534 808 NtContinue (1244336, 0, ... 02535 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02536 808 NtContinue (1244336, 0, ... 02537 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02538 808 NtContinue (1244336, 0, ... 02539 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02540 808 NtContinue (1244336, 0, ... 02541 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02542 808 NtContinue (1244336, 0, ... 02543 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02544 808 NtContinue (1244336, 0, ... 02545 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02546 808 NtContinue (1244336, 0, ... 02547 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02548 808 NtContinue (1244336, 0, ... 02549 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02550 808 NtContinue (1244336, 0, ... 02551 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02552 808 NtContinue (1244336, 0, ... 02553 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02554 808 NtContinue (1244336, 0, ... 02555 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02556 808 NtContinue (1244336, 0, ... 02557 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02558 808 NtContinue (1244336, 0, ... 02559 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02560 808 NtContinue (1244336, 0, ... 02561 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02562 808 NtContinue (1244336, 0, ... 02563 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02564 808 NtContinue (1244336, 0, ... 02565 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02566 808 NtContinue (1244336, 0, ... 02567 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02568 808 NtContinue (1244336, 0, ... 02569 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02570 808 NtContinue (1244336, 0, ... 02571 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02572 808 NtContinue (1244336, 0, ... 02573 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02574 808 NtContinue (1244336, 0, ... 02575 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02576 808 NtContinue (1244336, 0, ... 02577 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02578 808 NtContinue (1244336, 0, ... 02579 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02580 808 NtContinue (1244336, 0, ... 02581 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02582 808 NtContinue (1244336, 0, ... 02583 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02584 808 NtContinue (1244336, 0, ... 02585 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02586 808 NtContinue (1244336, 0, ... 02587 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02588 808 NtContinue (1244336, 0, ... 02589 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02590 808 NtContinue (1244336, 0, ... 02591 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02592 808 NtContinue (1244336, 0, ... 02593 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02594 808 NtContinue (1244336, 0, ... 02595 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02596 808 NtContinue (1244336, 0, ... 02597 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02598 808 NtContinue (1244336, 0, ... 02599 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02600 808 NtContinue (1244336, 0, ... 02601 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02602 808 NtContinue (1244336, 0, ... 02603 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02604 808 NtContinue (1244336, 0, ... 02605 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02606 808 NtContinue (1244336, 0, ... 02607 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02608 808 NtContinue (1244336, 0, ... 02609 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02610 808 NtContinue (1244336, 0, ... 02611 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02612 808 NtContinue (1244336, 0, ... 02613 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02614 808 NtContinue (1244336, 0, ... 02615 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02616 808 NtContinue (1244336, 0, ... 02617 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02618 808 NtContinue (1244336, 0, ... 02619 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02620 808 NtContinue (1244336, 0, ... 02621 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02622 808 NtContinue (1244336, 0, ... 02623 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02624 808 NtContinue (1244336, 0, ... 02625 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02626 808 NtContinue (1244336, 0, ... 02627 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02628 808 NtContinue (1244336, 0, ... 02629 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02630 808 NtContinue (1244336, 0, ... 02631 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02632 808 NtContinue (1244336, 0, ... 02633 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02634 808 NtContinue (1244336, 0, ... 02635 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02636 808 NtContinue (1244336, 0, ... 02637 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02638 808 NtContinue (1244336, 0, ... 02639 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02640 808 NtContinue (1244336, 0, ... 02641 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02642 808 NtContinue (1244336, 0, ... 02643 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02644 808 NtContinue (1244336, 0, ... 02645 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02646 808 NtContinue (1244336, 0, ... 02647 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02648 808 NtContinue (1244336, 0, ... 02649 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02650 808 NtContinue (1244336, 0, ... 02651 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02652 808 NtContinue (1244336, 0, ... 02653 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02654 808 NtContinue (1244336, 0, ... 02655 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02656 808 NtContinue (1244336, 0, ... 02657 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02658 808 NtContinue (1244336, 0, ... 02659 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02660 808 NtContinue (1244336, 0, ... 02661 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02662 808 NtContinue (1244336, 0, ... 02663 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02664 808 NtContinue (1244336, 0, ... 02665 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02666 808 NtContinue (1244336, 0, ... 02667 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02668 808 NtContinue (1244336, 0, ... 02669 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02670 808 NtContinue (1244336, 0, ... 02671 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02672 808 NtContinue (1244336, 0, ... 02673 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02674 808 NtContinue (1244336, 0, ... 02675 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02676 808 NtContinue (1244336, 0, ... 02677 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02678 808 NtContinue (1244336, 0, ... 02679 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02680 808 NtContinue (1244336, 0, ... 02681 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02682 808 NtContinue (1244336, 0, ... 02683 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02684 808 NtContinue (1244336, 0, ... 02685 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02686 808 NtContinue (1244336, 0, ... 02687 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02688 808 NtContinue (1244336, 0, ... 02689 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02690 808 NtContinue (1244336, 0, ... 02691 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02692 808 NtContinue (1244336, 0, ... 02693 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02694 808 NtContinue (1244336, 0, ... 02695 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02696 808 NtContinue (1244336, 0, ... 02697 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02698 808 NtContinue (1244336, 0, ... 02699 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02700 808 NtContinue (1244336, 0, ... 02701 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02702 808 NtContinue (1244336, 0, ... 02703 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02704 808 NtContinue (1244336, 0, ... 02705 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02706 808 NtContinue (1244336, 0, ... 02707 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02708 808 NtContinue (1244336, 0, ... 02709 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02710 808 NtContinue (1244336, 0, ... 02711 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02712 808 NtContinue (1244336, 0, ... 02713 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02714 808 NtContinue (1244336, 0, ... 02715 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02716 808 NtContinue (1244336, 0, ... 02717 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02718 808 NtContinue (1244336, 0, ... 02719 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02720 808 NtContinue (1244336, 0, ... 02721 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02722 808 NtContinue (1244336, 0, ... 02723 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02724 808 NtContinue (1244336, 0, ... 02725 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02726 808 NtContinue (1244336, 0, ... 02727 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02728 808 NtContinue (1244336, 0, ... 02729 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02730 808 NtContinue (1244336, 0, ... 02731 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02732 808 NtContinue (1244336, 0, ... 02733 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02734 808 NtContinue (1244336, 0, ... 02735 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02736 808 NtContinue (1244336, 0, ... 02737 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02738 808 NtContinue (1244336, 0, ... 02739 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02740 808 NtContinue (1244336, 0, ... 02741 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02742 808 NtContinue (1244336, 0, ... 02743 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02744 808 NtContinue (1244336, 0, ... 02745 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02746 808 NtContinue (1244336, 0, ... 02747 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02748 808 NtContinue (1244336, 0, ... 02749 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02750 808 NtContinue (1244336, 0, ... 02751 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02752 808 NtContinue (1244336, 0, ... 02753 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02754 808 NtContinue (1244336, 0, ... 02755 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02756 808 NtContinue (1244336, 0, ... 02757 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02758 808 NtContinue (1244336, 0, ... 02759 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02760 808 NtContinue (1244336, 0, ... 02761 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02762 808 NtContinue (1244336, 0, ... 02763 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02764 808 NtContinue (1244336, 0, ... 02765 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02766 808 NtContinue (1244336, 0, ... 02767 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02768 808 NtContinue (1244336, 0, ... 02769 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02770 808 NtContinue (1244336, 0, ... 02771 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02772 808 NtContinue (1244336, 0, ... 02773 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02774 808 NtContinue (1244336, 0, ... 02775 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02776 808 NtContinue (1244336, 0, ... 02777 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02778 808 NtContinue (1244336, 0, ... 02779 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02780 808 NtContinue (1244336, 0, ... 02781 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02782 808 NtContinue (1244336, 0, ... 02783 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02784 808 NtContinue (1244336, 0, ... 02785 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02786 808 NtContinue (1244336, 0, ... 02787 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02788 808 NtContinue (1244336, 0, ... 02789 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02790 808 NtContinue (1244336, 0, ... 02791 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02792 808 NtContinue (1244336, 0, ... 02793 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02794 808 NtContinue (1244336, 0, ... 02795 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02796 808 NtContinue (1244336, 0, ... 02797 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02798 808 NtContinue (1244336, 0, ... 02799 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02800 808 NtContinue (1244336, 0, ... 02801 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02802 808 NtContinue (1244336, 0, ... 02803 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02804 808 NtContinue (1244336, 0, ... 02805 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02806 808 NtContinue (1244336, 0, ... 02807 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02808 808 NtContinue (1244336, 0, ... 02809 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02810 808 NtContinue (1244336, 0, ... 02811 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02812 808 NtContinue (1244336, 0, ... 02813 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02814 808 NtContinue (1244336, 0, ... 02815 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02816 808 NtContinue (1244336, 0, ... 02817 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02818 808 NtContinue (1244336, 0, ... 02819 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02820 808 NtContinue (1244336, 0, ... 02821 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02822 808 NtContinue (1244336, 0, ... 02823 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02824 808 NtContinue (1244336, 0, ... 02825 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02826 808 NtContinue (1244336, 0, ... 02827 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02828 808 NtContinue (1244336, 0, ... 02829 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02830 808 NtContinue (1244336, 0, ... 02831 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02832 808 NtContinue (1244336, 0, ... 02833 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02834 808 NtContinue (1244336, 0, ... 02835 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02836 808 NtContinue (1244336, 0, ... 02837 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02838 808 NtContinue (1244336, 0, ... 02839 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02840 808 NtContinue (1244336, 0, ... 02841 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02842 808 NtContinue (1244336, 0, ... 02843 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02844 808 NtContinue (1244336, 0, ... 02845 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02846 808 NtContinue (1244336, 0, ... 02847 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02848 808 NtContinue (1244336, 0, ... 02849 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02850 808 NtContinue (1244336, 0, ... 02851 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02852 808 NtContinue (1244336, 0, ... 02853 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02854 808 NtContinue (1244336, 0, ... 02855 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02856 808 NtContinue (1244336, 0, ... 02857 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02858 808 NtContinue (1244336, 0, ... 02859 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02860 808 NtContinue (1244336, 0, ... 02861 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02862 808 NtContinue (1244336, 0, ... 02863 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02864 808 NtContinue (1244336, 0, ... 02865 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02866 808 NtContinue (1244336, 0, ... 02867 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02868 808 NtContinue (1244336, 0, ... 02869 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02870 808 NtContinue (1244336, 0, ... 02871 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02872 808 NtContinue (1244336, 0, ... 02873 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02874 808 NtContinue (1244336, 0, ... 02875 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02876 808 NtContinue (1244336, 0, ... 02877 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02878 808 NtContinue (1244336, 0, ... 02879 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02880 808 NtContinue (1244336, 0, ... 02881 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02882 808 NtContinue (1244336, 0, ... 02883 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02884 808 NtContinue (1244336, 0, ... 02885 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02886 808 NtContinue (1244336, 0, ... 02887 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02888 808 NtContinue (1244336, 0, ... 02889 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02890 808 NtContinue (1244336, 0, ... 02891 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02892 808 NtContinue (1244336, 0, ... 02893 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02894 808 NtContinue (1244336, 0, ... 02895 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02896 808 NtContinue (1244336, 0, ... 02897 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02898 808 NtContinue (1244336, 0, ... 02899 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02900 808 NtContinue (1244336, 0, ... 02901 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02902 808 NtContinue (1244336, 0, ... 02903 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02904 808 NtContinue (1244336, 0, ... 02905 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02906 808 NtContinue (1244336, 0, ... 02907 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02908 808 NtContinue (1244336, 0, ... 02909 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02910 808 NtContinue (1244336, 0, ... 02911 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02912 808 NtContinue (1244336, 0, ... 02913 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02914 808 NtContinue (1244336, 0, ... 02915 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02916 808 NtContinue (1244336, 0, ... 02917 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02918 808 NtContinue (1244336, 0, ... 02919 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02920 808 NtContinue (1244336, 0, ... 02921 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02922 808 NtContinue (1244336, 0, ... 02923 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02924 808 NtContinue (1244336, 0, ... 02925 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02926 808 NtContinue (1244336, 0, ... 02927 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02928 808 NtContinue (1244336, 0, ... 02929 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02930 808 NtContinue (1244336, 0, ... 02931 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02932 808 NtContinue (1244336, 0, ... 02933 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02934 808 NtContinue (1244336, 0, ... 02935 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02936 808 NtContinue (1244336, 0, ... 02937 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02938 808 NtContinue (1244336, 0, ... 02939 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02940 808 NtContinue (1244336, 0, ... 02941 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02942 808 NtContinue (1244336, 0, ... 02943 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02944 808 NtContinue (1244336, 0, ... 02945 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02946 808 NtContinue (1244336, 0, ... 02947 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02948 808 NtContinue (1244336, 0, ... 02949 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02950 808 NtContinue (1244336, 0, ... 02951 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02952 808 NtContinue (1244336, 0, ... 02953 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02954 808 NtContinue (1244336, 0, ... 02955 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02956 808 NtContinue (1244336, 0, ... 02957 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02958 808 NtContinue (1244336, 0, ... 02959 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02960 808 NtContinue (1244336, 0, ... 02961 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02962 808 NtContinue (1244336, 0, ... 02963 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02964 808 NtContinue (1244336, 0, ... 02965 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02966 808 NtContinue (1244336, 0, ... 02967 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02968 808 NtContinue (1244336, 0, ... 02969 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02970 808 NtContinue (1244336, 0, ... 02971 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02972 808 NtContinue (1244336, 0, ... 02973 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02974 808 NtContinue (1244336, 0, ... 02975 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02976 808 NtContinue (1244336, 0, ... 02977 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02978 808 NtContinue (1244336, 0, ... 02979 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02980 808 NtContinue (1244336, 0, ... 02981 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02982 808 NtContinue (1244336, 0, ... 02983 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02984 808 NtContinue (1244336, 0, ... 02985 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02986 808 NtContinue (1244336, 0, ... 02987 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02988 808 NtContinue (1244336, 0, ... 02989 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02990 808 NtContinue (1244336, 0, ... 02991 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02992 808 NtContinue (1244336, 0, ... 02993 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02994 808 NtContinue (1244336, 0, ... 02995 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02996 808 NtContinue (1244336, 0, ... 02997 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02998 808 NtContinue (1244336, 0, ... 02999 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03000 808 NtContinue (1244336, 0, ... 03001 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03002 808 NtContinue (1244336, 0, ... 03003 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03004 808 NtContinue (1244336, 0, ... 03005 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03006 808 NtContinue (1244336, 0, ... 03007 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03008 808 NtContinue (1244336, 0, ... 03009 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03010 808 NtContinue (1244336, 0, ... 03011 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03012 808 NtContinue (1244336, 0, ... 03013 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03014 808 NtContinue (1244336, 0, ... 03015 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03016 808 NtContinue (1244336, 0, ... 03017 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03018 808 NtContinue (1244336, 0, ... 03019 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03020 808 NtContinue (1244336, 0, ... 03021 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03022 808 NtContinue (1244336, 0, ... 03023 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03024 808 NtContinue (1244336, 0, ... 03025 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03026 808 NtContinue (1244336, 0, ... 03027 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03028 808 NtContinue (1244336, 0, ... 03029 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03030 808 NtContinue (1244336, 0, ... 03031 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03032 808 NtContinue (1244336, 0, ... 03033 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03034 808 NtContinue (1244336, 0, ... 03035 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03036 808 NtContinue (1244336, 0, ... 03037 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03038 808 NtContinue (1244336, 0, ... 03039 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03040 808 NtContinue (1244336, 0, ... 03041 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03042 808 NtContinue (1244336, 0, ... 03043 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03044 808 NtContinue (1244336, 0, ... 03045 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03046 808 NtContinue (1244336, 0, ... 03047 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03048 808 NtContinue (1244336, 0, ... 03049 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03050 808 NtContinue (1244336, 0, ... 03051 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03052 808 NtContinue (1244336, 0, ... 03053 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03054 808 NtContinue (1244336, 0, ... 03055 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03056 808 NtContinue (1244336, 0, ... 03057 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03058 808 NtContinue (1244336, 0, ... 03059 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03060 808 NtContinue (1244336, 0, ... 03061 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03062 808 NtContinue (1244336, 0, ... 03063 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03064 808 NtContinue (1244336, 0, ... 03065 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03066 808 NtContinue (1244336, 0, ... 03067 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03068 808 NtContinue (1244336, 0, ... 03069 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03070 808 NtContinue (1244336, 0, ... 03071 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03072 808 NtContinue (1244336, 0, ... 03073 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03074 808 NtContinue (1244336, 0, ... 03075 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03076 808 NtContinue (1244336, 0, ... 03077 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03078 808 NtContinue (1244336, 0, ... 03079 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03080 808 NtContinue (1244336, 0, ... 03081 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03082 808 NtContinue (1244336, 0, ... 03083 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03084 808 NtContinue (1244336, 0, ... 03085 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03086 808 NtContinue (1244336, 0, ... 03087 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03088 808 NtContinue (1244336, 0, ... 03089 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03090 808 NtContinue (1244336, 0, ... 03091 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03092 808 NtContinue (1244336, 0, ... 03093 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03094 808 NtContinue (1244336, 0, ... 03095 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03096 808 NtContinue (1244336, 0, ... 03097 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03098 808 NtContinue (1244336, 0, ... 03099 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03100 808 NtContinue (1244336, 0, ... 03101 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03102 808 NtContinue (1244336, 0, ... 03103 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03104 808 NtContinue (1244336, 0, ... 03105 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03106 808 NtContinue (1244336, 0, ... 03107 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03108 808 NtContinue (1244336, 0, ... 03109 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03110 808 NtContinue (1244336, 0, ... 03111 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03112 808 NtContinue (1244336, 0, ... 03113 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03114 808 NtContinue (1244336, 0, ... 03115 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03116 808 NtContinue (1244336, 0, ... 03117 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03118 808 NtContinue (1244336, 0, ... 03119 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03120 808 NtContinue (1244336, 0, ... 03121 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03122 808 NtContinue (1244336, 0, ... 03123 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03124 808 NtContinue (1244336, 0, ... 03125 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03126 808 NtContinue (1244336, 0, ... 03127 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03128 808 NtContinue (1244336, 0, ... 03129 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03130 808 NtContinue (1244336, 0, ... 03131 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03132 808 NtContinue (1244336, 0, ... 03133 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03134 808 NtContinue (1244336, 0, ... 03135 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03136 808 NtContinue (1244336, 0, ... 03137 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03138 808 NtContinue (1244336, 0, ... 03139 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03140 808 NtContinue (1244336, 0, ... 03141 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03142 808 NtContinue (1244336, 0, ... 03143 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03144 808 NtContinue (1244336, 0, ... 03145 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03146 808 NtContinue (1244336, 0, ... 03147 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03148 808 NtContinue (1244336, 0, ... 03149 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03150 808 NtContinue (1244336, 0, ... 03151 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03152 808 NtContinue (1244336, 0, ... 03153 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03154 808 NtContinue (1244336, 0, ... 03155 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03156 808 NtContinue (1244336, 0, ... 03157 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03158 808 NtContinue (1244336, 0, ... 03159 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03160 808 NtContinue (1244336, 0, ... 03161 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03162 808 NtContinue (1244336, 0, ... 03163 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03164 808 NtContinue (1244336, 0, ... 03165 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03166 808 NtContinue (1244336, 0, ... 03167 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03168 808 NtContinue (1244336, 0, ... 03169 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03170 808 NtContinue (1244336, 0, ... 03171 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03172 808 NtContinue (1244336, 0, ... 03173 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03174 808 NtContinue (1244336, 0, ... 03175 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03176 808 NtContinue (1244336, 0, ... 03177 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03178 808 NtContinue (1244336, 0, ... 03179 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03180 808 NtContinue (1244336, 0, ... 03181 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03182 808 NtContinue (1244336, 0, ... 03183 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03184 808 NtContinue (1244336, 0, ... 03185 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03186 808 NtContinue (1244336, 0, ... 03187 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03188 808 NtContinue (1244336, 0, ... 03189 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03190 808 NtContinue (1244336, 0, ... 03191 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03192 808 NtContinue (1244336, 0, ... 03193 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03194 808 NtContinue (1244336, 0, ... 03195 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03196 808 NtContinue (1244336, 0, ... 03197 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03198 808 NtContinue (1244336, 0, ... 03199 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03200 808 NtContinue (1244336, 0, ... 03201 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03202 808 NtContinue (1244336, 0, ... 03203 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03204 808 NtContinue (1244336, 0, ... 03205 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03206 808 NtContinue (1244336, 0, ... 03207 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03208 808 NtContinue (1244336, 0, ... 03209 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03210 808 NtContinue (1244336, 0, ... 03211 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03212 808 NtContinue (1244336, 0, ... 03213 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03214 808 NtContinue (1244336, 0, ... 03215 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03216 808 NtContinue (1244336, 0, ... 03217 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03218 808 NtContinue (1244336, 0, ... 03219 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03220 808 NtContinue (1244336, 0, ... 03221 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03222 808 NtContinue (1244336, 0, ... 03223 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03224 808 NtContinue (1244336, 0, ... 03225 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03226 808 NtContinue (1244336, 0, ... 03227 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03228 808 NtContinue (1244336, 0, ... 03229 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03230 808 NtContinue (1244336, 0, ... 03231 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03232 808 NtContinue (1244336, 0, ... 03233 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03234 808 NtContinue (1244336, 0, ... 03235 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03236 808 NtContinue (1244336, 0, ... 03237 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03238 808 NtContinue (1244336, 0, ... 03239 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03240 808 NtContinue (1244336, 0, ... 03241 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03242 808 NtContinue (1244336, 0, ... 03243 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03244 808 NtContinue (1244336, 0, ... 03245 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03246 808 NtContinue (1244336, 0, ... 03247 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03248 808 NtContinue (1244336, 0, ... 03249 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03250 808 NtContinue (1244336, 0, ... 03251 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03252 808 NtContinue (1244336, 0, ... 03253 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03254 808 NtContinue (1244336, 0, ... 03255 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03256 808 NtContinue (1244336, 0, ... 03257 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03258 808 NtContinue (1244336, 0, ... 03259 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03260 808 NtContinue (1244336, 0, ... 03261 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03262 808 NtContinue (1244336, 0, ... 03263 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03264 808 NtContinue (1244336, 0, ... 03265 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03266 808 NtContinue (1244336, 0, ... 03267 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03268 808 NtContinue (1244336, 0, ... 03269 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03270 808 NtContinue (1244336, 0, ... 03271 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03272 808 NtContinue (1244336, 0, ... 03273 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03274 808 NtContinue (1244336, 0, ... 03275 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03276 808 NtContinue (1244336, 0, ... 03277 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03278 808 NtContinue (1244336, 0, ... 03279 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03280 808 NtContinue (1244336, 0, ... 03281 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03282 808 NtContinue (1244336, 0, ... 03283 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03284 808 NtContinue (1244336, 0, ... 03285 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03286 808 NtContinue (1244336, 0, ... 03287 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03288 808 NtContinue (1244336, 0, ... 03289 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03290 808 NtContinue (1244336, 0, ... 03291 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03292 808 NtContinue (1244336, 0, ... 03293 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03294 808 NtContinue (1244336, 0, ... 03295 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03296 808 NtContinue (1244336, 0, ... 03297 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03298 808 NtContinue (1244336, 0, ... 03299 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03300 808 NtContinue (1244336, 0, ... 03301 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03302 808 NtContinue (1244336, 0, ... 03303 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03304 808 NtContinue (1244336, 0, ... 03305 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03306 808 NtContinue (1244336, 0, ... 03307 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03308 808 NtContinue (1244336, 0, ... 03309 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03310 808 NtContinue (1244336, 0, ... 03311 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03312 808 NtContinue (1244336, 0, ... 03313 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03314 808 NtContinue (1244336, 0, ... 03315 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03316 808 NtContinue (1244336, 0, ... 03317 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03318 808 NtContinue (1244336, 0, ... 03319 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03320 808 NtContinue (1244336, 0, ... 03321 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03322 808 NtContinue (1244336, 0, ... 03323 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03324 808 NtContinue (1244336, 0, ... 03325 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03326 808 NtContinue (1244336, 0, ... 03327 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03328 808 NtContinue (1244336, 0, ... 03329 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03330 808 NtContinue (1244336, 0, ... 03331 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03332 808 NtContinue (1244336, 0, ... 03333 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03334 808 NtContinue (1244336, 0, ... 03335 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03336 808 NtContinue (1244336, 0, ... 03337 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03338 808 NtContinue (1244336, 0, ... 03339 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03340 808 NtContinue (1244336, 0, ... 03341 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03342 808 NtContinue (1244336, 0, ... 03343 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03344 808 NtContinue (1244336, 0, ... 03345 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03346 808 NtContinue (1244336, 0, ... 03347 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03348 808 NtContinue (1244336, 0, ... 03349 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03350 808 NtContinue (1244336, 0, ... 03351 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03352 808 NtContinue (1244336, 0, ... 03353 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03354 808 NtContinue (1244336, 0, ... 03355 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03356 808 NtContinue (1244336, 0, ... 03357 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03358 808 NtContinue (1244336, 0, ... 03359 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03360 808 NtContinue (1244336, 0, ... 03361 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03362 808 NtContinue (1244336, 0, ... 03363 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03364 808 NtContinue (1244336, 0, ... 03365 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03366 808 NtContinue (1244336, 0, ... 03367 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03368 808 NtContinue (1244336, 0, ... 03369 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03370 808 NtContinue (1244336, 0, ... 03371 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03372 808 NtContinue (1244336, 0, ... 03373 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03374 808 NtContinue (1244336, 0, ... 03375 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03376 808 NtContinue (1244336, 0, ... 03377 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03378 808 NtContinue (1244336, 0, ... 03379 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03380 808 NtContinue (1244336, 0, ... 03381 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03382 808 NtContinue (1244336, 0, ... 03383 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03384 808 NtContinue (1244336, 0, ... 03385 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03386 808 NtContinue (1244336, 0, ... 03387 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03388 808 NtContinue (1244336, 0, ... 03389 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03390 808 NtContinue (1244336, 0, ... 03391 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03392 808 NtContinue (1244336, 0, ... 03393 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03394 808 NtContinue (1244336, 0, ... 03395 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03396 808 NtContinue (1244336, 0, ... 03397 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03398 808 NtContinue (1244336, 0, ... 03399 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03400 808 NtContinue (1244336, 0, ... 03401 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03402 808 NtContinue (1244336, 0, ... 03403 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03404 808 NtContinue (1244336, 0, ... 03405 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03406 808 NtContinue (1244336, 0, ... 03407 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03408 808 NtContinue (1244336, 0, ... 03409 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03410 808 NtContinue (1244336, 0, ... 03411 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03412 808 NtContinue (1244336, 0, ... 03413 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03414 808 NtContinue (1244336, 0, ... 03415 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03416 808 NtContinue (1244336, 0, ... 03417 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03418 808 NtContinue (1244336, 0, ... 03419 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03420 808 NtContinue (1244336, 0, ... 03421 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03422 808 NtContinue (1244336, 0, ... 03423 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03424 808 NtContinue (1244336, 0, ... 03425 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03426 808 NtContinue (1244336, 0, ... 03427 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03428 808 NtContinue (1244336, 0, ... 03429 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03430 808 NtContinue (1244336, 0, ... 03431 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03432 808 NtContinue (1244336, 0, ... 03433 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03434 808 NtContinue (1244336, 0, ... 03435 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03436 808 NtContinue (1244336, 0, ... 03437 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03438 808 NtContinue (1244336, 0, ... 03439 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03440 808 NtContinue (1244336, 0, ... 03441 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03442 808 NtContinue (1244336, 0, ... 03443 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03444 808 NtContinue (1244336, 0, ... 03445 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03446 808 NtContinue (1244336, 0, ... 03447 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03448 808 NtContinue (1244336, 0, ... 03449 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03450 808 NtContinue (1244336, 0, ... 03451 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03452 808 NtContinue (1244336, 0, ... 03453 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03454 808 NtContinue (1244336, 0, ... 03455 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03456 808 NtContinue (1244336, 0, ... 03457 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03458 808 NtContinue (1244336, 0, ... 03459 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03460 808 NtContinue (1244336, 0, ... 03461 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03462 808 NtContinue (1244336, 0, ... 03463 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03464 808 NtContinue (1244336, 0, ... 03465 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03466 808 NtContinue (1244336, 0, ... 03467 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03468 808 NtContinue (1244336, 0, ... 03469 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03470 808 NtContinue (1244336, 0, ... 03471 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03472 808 NtContinue (1244336, 0, ... 03473 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03474 808 NtContinue (1244336, 0, ... 03475 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03476 808 NtContinue (1244336, 0, ... 03477 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03478 808 NtContinue (1244336, 0, ... 03479 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03480 808 NtContinue (1244336, 0, ... 03481 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03482 808 NtContinue (1244336, 0, ... 03483 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03484 808 NtContinue (1244336, 0, ... 03485 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03486 808 NtContinue (1244336, 0, ... 03487 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03488 808 NtContinue (1244336, 0, ... 03489 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03490 808 NtContinue (1244336, 0, ... 03491 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03492 808 NtContinue (1244336, 0, ... 03493 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03494 808 NtContinue (1244336, 0, ... 03495 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03496 808 NtContinue (1244336, 0, ... 03497 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03498 808 NtContinue (1244336, 0, ... 03499 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03500 808 NtContinue (1244336, 0, ... 03501 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03502 808 NtContinue (1244336, 0, ... 03503 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03504 808 NtContinue (1244336, 0, ... 03505 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03506 808 NtContinue (1244336, 0, ... 03507 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03508 808 NtContinue (1244336, 0, ... 03509 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03510 808 NtContinue (1244336, 0, ... 03511 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03512 808 NtContinue (1244336, 0, ... 03513 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03514 808 NtContinue (1244336, 0, ... 03515 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03516 808 NtContinue (1244336, 0, ... 03517 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03518 808 NtContinue (1244336, 0, ... 03519 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03520 808 NtContinue (1244336, 0, ... 03521 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03522 808 NtContinue (1244336, 0, ... 03523 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03524 808 NtContinue (1244336, 0, ... 03525 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03526 808 NtContinue (1244336, 0, ... 03527 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03528 808 NtContinue (1244336, 0, ... 03529 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03530 808 NtContinue (1244336, 0, ... 03531 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03532 808 NtContinue (1244336, 0, ... 03533 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03534 808 NtContinue (1244336, 0, ... 03535 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03536 808 NtContinue (1244336, 0, ... 03537 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03538 808 NtContinue (1244336, 0, ... 03539 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03540 808 NtContinue (1244336, 0, ... 03541 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03542 808 NtContinue (1244336, 0, ... 03543 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03544 808 NtContinue (1244336, 0, ... 03545 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03546 808 NtContinue (1244336, 0, ... 03547 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03548 808 NtContinue (1244336, 0, ... 03549 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03550 808 NtContinue (1244336, 0, ... 03551 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03552 808 NtContinue (1244336, 0, ... 03553 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03554 808 NtContinue (1244336, 0, ... 03555 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03556 808 NtContinue (1244336, 0, ... 03557 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03558 808 NtContinue (1244336, 0, ... 03559 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03560 808 NtContinue (1244336, 0, ... 03561 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03562 808 NtContinue (1244336, 0, ... 03563 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03564 808 NtContinue (1244336, 0, ... 03565 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03566 808 NtContinue (1244336, 0, ... 03567 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03568 808 NtContinue (1244336, 0, ... 03569 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03570 808 NtContinue (1244336, 0, ... 03571 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03572 808 NtContinue (1244336, 0, ... 03573 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03574 808 NtContinue (1244336, 0, ... 03575 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03576 808 NtContinue (1244336, 0, ... 03577 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03578 808 NtContinue (1244336, 0, ... 03579 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03580 808 NtContinue (1244336, 0, ... 03581 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03582 808 NtContinue (1244336, 0, ... 03583 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03584 808 NtContinue (1244336, 0, ... 03585 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03586 808 NtContinue (1244336, 0, ... 03587 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03588 808 NtContinue (1244336, 0, ... 03589 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03590 808 NtContinue (1244336, 0, ... 03591 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03592 808 NtContinue (1244336, 0, ... 03593 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03594 808 NtContinue (1244336, 0, ... 03595 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03596 808 NtContinue (1244336, 0, ... 03597 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03598 808 NtContinue (1244336, 0, ... 03599 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03600 808 NtContinue (1244336, 0, ... 03601 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03602 808 NtContinue (1244336, 0, ... 03603 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03604 808 NtContinue (1244336, 0, ... 03605 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03606 808 NtContinue (1244336, 0, ... 03607 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03608 808 NtContinue (1244336, 0, ... 03609 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03610 808 NtContinue (1244336, 0, ... 03611 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03612 808 NtContinue (1244336, 0, ... 03613 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03614 808 NtContinue (1244336, 0, ... 03615 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03616 808 NtContinue (1244336, 0, ... 03617 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03618 808 NtContinue (1244336, 0, ... 03619 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03620 808 NtContinue (1244336, 0, ... 03621 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03622 808 NtContinue (1244336, 0, ... 03623 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03624 808 NtContinue (1244336, 0, ... 03625 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03626 808 NtContinue (1244336, 0, ... 03627 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03628 808 NtContinue (1244336, 0, ... 03629 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03630 808 NtContinue (1244336, 0, ... 03631 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03632 808 NtContinue (1244336, 0, ... 03633 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03634 808 NtContinue (1244336, 0, ... 03635 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03636 808 NtContinue (1244336, 0, ... 03637 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03638 808 NtContinue (1244336, 0, ... 03639 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03640 808 NtContinue (1244336, 0, ... 03641 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03642 808 NtContinue (1244336, 0, ... 03643 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03644 808 NtContinue (1244336, 0, ... 03645 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03646 808 NtContinue (1244336, 0, ... 03647 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03648 808 NtContinue (1244336, 0, ... 03649 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03650 808 NtContinue (1244336, 0, ... 03651 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03652 808 NtContinue (1244336, 0, ... 03653 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03654 808 NtContinue (1244336, 0, ... 03655 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03656 808 NtContinue (1244336, 0, ... 03657 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03658 808 NtContinue (1244336, 0, ... 03659 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03660 808 NtContinue (1244336, 0, ... 03661 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03662 808 NtContinue (1244336, 0, ... 03663 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03664 808 NtContinue (1244336, 0, ... 03665 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03666 808 NtContinue (1244336, 0, ... 03667 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03668 808 NtContinue (1244336, 0, ... 03669 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03670 808 NtContinue (1244336, 0, ... 03671 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03672 808 NtContinue (1244336, 0, ... 03673 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03674 808 NtContinue (1244336, 0, ... 03675 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03676 808 NtContinue (1244336, 0, ... 03677 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03678 808 NtContinue (1244336, 0, ... 03679 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03680 808 NtContinue (1244336, 0, ... 03681 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03682 808 NtContinue (1244336, 0, ... 03683 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03684 808 NtContinue (1244336, 0, ... 03685 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03686 808 NtContinue (1244336, 0, ... 03687 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03688 808 NtContinue (1244336, 0, ... 03689 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03690 808 NtContinue (1244336, 0, ... 03691 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03692 808 NtContinue (1244336, 0, ... 03693 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03694 808 NtContinue (1244336, 0, ... 03695 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03696 808 NtContinue (1244336, 0, ... 03697 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03698 808 NtContinue (1244336, 0, ... 03699 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03700 808 NtContinue (1244336, 0, ... 03701 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03702 808 NtContinue (1244336, 0, ... 03703 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03704 808 NtContinue (1244336, 0, ... 03705 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03706 808 NtContinue (1244336, 0, ... 03707 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03708 808 NtContinue (1244336, 0, ... 03709 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03710 808 NtContinue (1244336, 0, ... 03711 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03712 808 NtContinue (1244336, 0, ... 03713 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03714 808 NtContinue (1244336, 0, ... 03715 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03716 808 NtContinue (1244336, 0, ... 03717 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03718 808 NtContinue (1244336, 0, ... 03719 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03720 808 NtContinue (1244336, 0, ... 03721 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03722 808 NtContinue (1244336, 0, ... 03723 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03724 808 NtContinue (1244336, 0, ... 03725 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03726 808 NtContinue (1244336, 0, ... 03727 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03728 808 NtContinue (1244336, 0, ... 03729 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03730 808 NtContinue (1244336, 0, ... 03731 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03732 808 NtContinue (1244336, 0, ... 03733 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03734 808 NtContinue (1244336, 0, ... 03735 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03736 808 NtContinue (1244336, 0, ... 03737 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03738 808 NtContinue (1244336, 0, ... 03739 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03740 808 NtContinue (1244336, 0, ... 03741 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03742 808 NtContinue (1244336, 0, ... 03743 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03744 808 NtContinue (1244336, 0, ... 03745 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03746 808 NtContinue (1244336, 0, ... 03747 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03748 808 NtContinue (1244336, 0, ... 03749 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03750 808 NtContinue (1244336, 0, ... 03751 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03752 808 NtContinue (1244336, 0, ... 03753 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03754 808 NtContinue (1244336, 0, ... 03755 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03756 808 NtContinue (1244336, 0, ... 03757 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03758 808 NtContinue (1244336, 0, ... 03759 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03760 808 NtContinue (1244336, 0, ... 03761 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03762 808 NtContinue (1244336, 0, ... 03763 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03764 808 NtContinue (1244336, 0, ... 03765 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03766 808 NtContinue (1244336, 0, ... 03767 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03768 808 NtContinue (1244336, 0, ... 03769 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03770 808 NtContinue (1244336, 0, ... 03771 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03772 808 NtContinue (1244336, 0, ... 03773 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03774 808 NtContinue (1244336, 0, ... 03775 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03776 808 NtContinue (1244336, 0, ... 03777 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03778 808 NtContinue (1244336, 0, ... 03779 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03780 808 NtContinue (1244336, 0, ... 03781 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03782 808 NtContinue (1244336, 0, ... 03783 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03784 808 NtContinue (1244336, 0, ... 03785 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03786 808 NtContinue (1244336, 0, ... 03787 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03788 808 NtContinue (1244336, 0, ... 03789 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03790 808 NtContinue (1244336, 0, ... 03791 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03792 808 NtContinue (1244336, 0, ... 03793 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03794 808 NtContinue (1244336, 0, ... 03795 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03796 808 NtContinue (1244336, 0, ... 03797 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03798 808 NtContinue (1244336, 0, ... 03799 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03800 808 NtContinue (1244336, 0, ... 03801 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03802 808 NtContinue (1244336, 0, ... 03803 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03804 808 NtContinue (1244336, 0, ... 03805 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03806 808 NtContinue (1244336, 0, ... 03807 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03808 808 NtContinue (1244336, 0, ... 03809 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03810 808 NtContinue (1244336, 0, ... 03811 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03812 808 NtContinue (1244336, 0, ... 03813 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03814 808 NtContinue (1244336, 0, ... 03815 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03816 808 NtContinue (1244336, 0, ... 03817 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03818 808 NtContinue (1244336, 0, ... 03819 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03820 808 NtContinue (1244336, 0, ... 03821 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03822 808 NtContinue (1244336, 0, ... 03823 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03824 808 NtContinue (1244336, 0, ... 03825 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03826 808 NtContinue (1244336, 0, ... 03827 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03828 808 NtContinue (1244336, 0, ... 03829 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03830 808 NtContinue (1244336, 0, ... 03831 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03832 808 NtContinue (1244336, 0, ... 03833 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03834 808 NtContinue (1244336, 0, ... 03835 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03836 808 NtContinue (1244336, 0, ... 03837 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03838 808 NtContinue (1244336, 0, ... 03839 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03840 808 NtContinue (1244336, 0, ... 03841 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03842 808 NtContinue (1244336, 0, ... 03843 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03844 808 NtContinue (1244336, 0, ... 03845 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03846 808 NtContinue (1244336, 0, ... 03847 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03848 808 NtContinue (1244336, 0, ... 03849 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03850 808 NtContinue (1244336, 0, ... 03851 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03852 808 NtContinue (1244336, 0, ... 03853 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03854 808 NtContinue (1244336, 0, ... 03855 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03856 808 NtContinue (1244336, 0, ... 03857 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03858 808 NtContinue (1244336, 0, ... 03859 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03860 808 NtContinue (1244336, 0, ... 03861 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03862 808 NtContinue (1244336, 0, ... 03863 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03864 808 NtContinue (1244336, 0, ... 03865 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03866 808 NtContinue (1244336, 0, ... 03867 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03868 808 NtContinue (1244336, 0, ... 03869 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03870 808 NtContinue (1244336, 0, ... 03871 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03872 808 NtContinue (1244336, 0, ... 03873 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03874 808 NtContinue (1244336, 0, ... 03875 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03876 808 NtContinue (1244336, 0, ... 03877 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03878 808 NtContinue (1244336, 0, ... 03879 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03880 808 NtContinue (1244336, 0, ... 03881 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03882 808 NtContinue (1244336, 0, ... 03883 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03884 808 NtContinue (1244336, 0, ... 03885 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03886 808 NtContinue (1244336, 0, ... 03887 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03888 808 NtContinue (1244336, 0, ... 03889 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03890 808 NtContinue (1244336, 0, ... 03891 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03892 808 NtContinue (1244336, 0, ... 03893 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03894 808 NtContinue (1244336, 0, ... 03895 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03896 808 NtContinue (1244336, 0, ... 03897 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03898 808 NtContinue (1244336, 0, ... 03899 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03900 808 NtContinue (1244336, 0, ... 03901 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03902 808 NtContinue (1244336, 0, ... 03903 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03904 808 NtContinue (1244336, 0, ... 03905 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03906 808 NtContinue (1244336, 0, ... 03907 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03908 808 NtContinue (1244336, 0, ... 03909 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03910 808 NtContinue (1244336, 0, ... 03911 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03912 808 NtContinue (1244336, 0, ... 03913 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03914 808 NtContinue (1244336, 0, ... 03915 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03916 808 NtContinue (1244336, 0, ... 03917 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03918 808 NtContinue (1244336, 0, ... 03919 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03920 808 NtContinue (1244336, 0, ... 03921 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03922 808 NtContinue (1244336, 0, ... 03923 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03924 808 NtContinue (1244336, 0, ... 03925 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03926 808 NtContinue (1244336, 0, ... 03927 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03928 808 NtContinue (1244336, 0, ... 03929 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03930 808 NtContinue (1244336, 0, ... 03931 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03932 808 NtContinue (1244336, 0, ... 03933 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03934 808 NtContinue (1244336, 0, ... 03935 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03936 808 NtContinue (1244336, 0, ... 03937 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03938 808 NtContinue (1244336, 0, ... 03939 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03940 808 NtContinue (1244336, 0, ... 03941 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03942 808 NtContinue (1244336, 0, ... 03943 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03944 808 NtContinue (1244336, 0, ... 03945 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03946 808 NtContinue (1244336, 0, ... 03947 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03948 808 NtContinue (1244336, 0, ... 03949 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03950 808 NtContinue (1244336, 0, ... 03951 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03952 808 NtContinue (1244336, 0, ... 03953 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03954 808 NtContinue (1244336, 0, ... 03955 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03956 808 NtContinue (1244336, 0, ... 03957 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03958 808 NtContinue (1244336, 0, ... 03959 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03960 808 NtContinue (1244336, 0, ... 03961 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03962 808 NtContinue (1244336, 0, ... 03963 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03964 808 NtContinue (1244336, 0, ... 03965 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03966 808 NtContinue (1244336, 0, ... 03967 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03968 808 NtContinue (1244336, 0, ... 03969 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03970 808 NtContinue (1244336, 0, ... 03971 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03972 808 NtContinue (1244336, 0, ... 03973 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03974 808 NtContinue (1244336, 0, ... 03975 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03976 808 NtContinue (1244336, 0, ... 03977 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03978 808 NtContinue (1244336, 0, ... 03979 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03980 808 NtContinue (1244336, 0, ... 03981 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03982 808 NtContinue (1244336, 0, ... 03983 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03984 808 NtContinue (1244336, 0, ... 03985 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03986 808 NtContinue (1244336, 0, ... 03987 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03988 808 NtContinue (1244336, 0, ... 03989 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03990 808 NtContinue (1244336, 0, ... 03991 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03992 808 NtContinue (1244336, 0, ... 03993 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03994 808 NtContinue (1244336, 0, ... 03995 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03996 808 NtContinue (1244336, 0, ... 03997 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03998 808 NtContinue (1244336, 0, ... 03999 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04000 808 NtContinue (1244336, 0, ... 04001 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04002 808 NtContinue (1244336, 0, ... 04003 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04004 808 NtContinue (1244336, 0, ... 04005 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04006 808 NtContinue (1244336, 0, ... 04007 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04008 808 NtContinue (1244336, 0, ... 04009 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04010 808 NtContinue (1244336, 0, ... 04011 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04012 808 NtContinue (1244336, 0, ... 04013 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04014 808 NtContinue (1244336, 0, ... 04015 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04016 808 NtContinue (1244336, 0, ... 04017 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04018 808 NtContinue (1244336, 0, ... 04019 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04020 808 NtContinue (1244336, 0, ... 04021 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04022 808 NtContinue (1244336, 0, ... 04023 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04024 808 NtContinue (1244336, 0, ... 04025 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04026 808 NtContinue (1244336, 0, ... 04027 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04028 808 NtContinue (1244336, 0, ... 04029 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04030 808 NtContinue (1244336, 0, ... 04031 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04032 808 NtContinue (1244336, 0, ... 04033 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04034 808 NtContinue (1244336, 0, ... 04035 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04036 808 NtContinue (1244336, 0, ... 04037 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04038 808 NtContinue (1244336, 0, ... 04039 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04040 808 NtContinue (1244336, 0, ... 04041 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04042 808 NtContinue (1244336, 0, ... 04043 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04044 808 NtContinue (1244336, 0, ... 04045 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04046 808 NtContinue (1244336, 0, ... 04047 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04048 808 NtContinue (1244336, 0, ... 04049 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04050 808 NtContinue (1244336, 0, ... 04051 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04052 808 NtContinue (1244336, 0, ... 04053 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04054 808 NtContinue (1244336, 0, ... 04055 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04056 808 NtContinue (1244336, 0, ... 04057 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04058 808 NtContinue (1244336, 0, ... 04059 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04060 808 NtContinue (1244336, 0, ... 04061 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04062 808 NtContinue (1244336, 0, ... 04063 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04064 808 NtContinue (1244336, 0, ... 04065 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04066 808 NtContinue (1244336, 0, ... 04067 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04068 808 NtContinue (1244336, 0, ... 04069 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04070 808 NtContinue (1244336, 0, ... 04071 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04072 808 NtContinue (1244336, 0, ... 04073 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04074 808 NtContinue (1244336, 0, ... 04075 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04076 808 NtContinue (1244336, 0, ... 04077 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04078 808 NtContinue (1244336, 0, ... 04079 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04080 808 NtContinue (1244336, 0, ... 04081 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04082 808 NtContinue (1244336, 0, ... 04083 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04084 808 NtContinue (1244336, 0, ... 04085 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04086 808 NtContinue (1244336, 0, ... 04087 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04088 808 NtContinue (1244336, 0, ... 04089 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04090 808 NtContinue (1244336, 0, ... 04091 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04092 808 NtContinue (1244336, 0, ... 04093 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04094 808 NtContinue (1244336, 0, ... 04095 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04096 808 NtContinue (1244336, 0, ... 04097 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04098 808 NtContinue (1244336, 0, ... 04099 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04100 808 NtContinue (1244336, 0, ... 04101 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04102 808 NtContinue (1244336, 0, ... 04103 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04104 808 NtContinue (1244336, 0, ... 04105 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04106 808 NtContinue (1244336, 0, ... 04107 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04108 808 NtContinue (1244336, 0, ... 04109 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04110 808 NtContinue (1244336, 0, ... 04111 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04112 808 NtContinue (1244336, 0, ... 04113 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04114 808 NtContinue (1244336, 0, ... 04115 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04116 808 NtContinue (1244336, 0, ... 04117 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04118 808 NtContinue (1244336, 0, ... 04119 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04120 808 NtContinue (1244336, 0, ... 04121 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04122 808 NtContinue (1244336, 0, ... 04123 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04124 808 NtContinue (1244336, 0, ... 04125 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04126 808 NtContinue (1244336, 0, ... 04127 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04128 808 NtContinue (1244336, 0, ... 04129 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04130 808 NtContinue (1244336, 0, ... 04131 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04132 808 NtContinue (1244336, 0, ... 04133 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04134 808 NtContinue (1244336, 0, ... 04135 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04136 808 NtContinue (1244336, 0, ... 04137 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04138 808 NtContinue (1244336, 0, ... 04139 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04140 808 NtContinue (1244336, 0, ... 04141 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04142 808 NtContinue (1244336, 0, ... 04143 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04144 808 NtContinue (1244336, 0, ... 04145 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04146 808 NtContinue (1244336, 0, ... 04147 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04148 808 NtContinue (1244336, 0, ... 04149 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04150 808 NtContinue (1244336, 0, ... 04151 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04152 808 NtContinue (1244336, 0, ... 04153 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04154 808 NtContinue (1244336, 0, ... 04155 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04156 808 NtContinue (1244336, 0, ... 04157 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04158 808 NtContinue (1244336, 0, ... 04159 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04160 808 NtContinue (1244336, 0, ... 04161 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04162 808 NtContinue (1244336, 0, ... 04163 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04164 808 NtContinue (1244336, 0, ... 04165 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04166 808 NtContinue (1244336, 0, ... 04167 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04168 808 NtContinue (1244336, 0, ... 04169 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04170 808 NtContinue (1244336, 0, ... 04171 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04172 808 NtContinue (1244336, 0, ... 04173 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04174 808 NtContinue (1244336, 0, ... 04175 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04176 808 NtContinue (1244336, 0, ... 04177 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04178 808 NtContinue (1244336, 0, ... 04179 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04180 808 NtContinue (1244336, 0, ... 04181 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04182 808 NtContinue (1244336, 0, ... 04183 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04184 808 NtContinue (1244336, 0, ... 04185 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04186 808 NtContinue (1244336, 0, ... 04187 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04188 808 NtContinue (1244336, 0, ... 04189 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04190 808 NtContinue (1244336, 0, ... 04191 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04192 808 NtContinue (1244336, 0, ... 04193 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04194 808 NtContinue (1244336, 0, ... 04195 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04196 808 NtContinue (1244336, 0, ... 04197 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04198 808 NtContinue (1244336, 0, ... 04199 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04200 808 NtContinue (1244336, 0, ... 04201 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04202 808 NtContinue (1244336, 0, ... 04203 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04204 808 NtContinue (1244336, 0, ... 04205 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04206 808 NtContinue (1244336, 0, ... 04207 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04208 808 NtContinue (1244336, 0, ... 04209 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04210 808 NtContinue (1244336, 0, ... 04211 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04212 808 NtContinue (1244336, 0, ... 04213 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04214 808 NtContinue (1244336, 0, ... 04215 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04216 808 NtContinue (1244336, 0, ... 04217 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04218 808 NtContinue (1244336, 0, ... 04219 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04220 808 NtContinue (1244336, 0, ... 04221 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04222 808 NtContinue (1244336, 0, ... 04223 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04224 808 NtContinue (1244336, 0, ... 04225 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04226 808 NtContinue (1244336, 0, ... 04227 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04228 808 NtContinue (1244336, 0, ... 04229 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04230 808 NtContinue (1244336, 0, ... 04231 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04232 808 NtContinue (1244336, 0, ... 04233 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04234 808 NtContinue (1244336, 0, ... 04235 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04236 808 NtContinue (1244336, 0, ... 04237 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04238 808 NtContinue (1244336, 0, ... 04239 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04240 808 NtContinue (1244336, 0, ... 04241 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04242 808 NtContinue (1244336, 0, ... 04243 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04244 808 NtContinue (1244336, 0, ... 04245 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04246 808 NtContinue (1244336, 0, ... 04247 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04248 808 NtContinue (1244336, 0, ... 04249 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04250 808 NtContinue (1244336, 0, ... 04251 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04252 808 NtContinue (1244336, 0, ... 04253 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04254 808 NtContinue (1244336, 0, ... 04255 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04256 808 NtContinue (1244336, 0, ... 04257 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04258 808 NtContinue (1244336, 0, ... 04259 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04260 808 NtContinue (1244336, 0, ... 04261 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04262 808 NtContinue (1244336, 0, ... 04263 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04264 808 NtContinue (1244336, 0, ... 04265 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04266 808 NtContinue (1244336, 0, ... 04267 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04268 808 NtContinue (1244336, 0, ... 04269 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04270 808 NtContinue (1244336, 0, ... 04271 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04272 808 NtContinue (1244336, 0, ... 04273 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04274 808 NtContinue (1244336, 0, ... 04275 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04276 808 NtContinue (1244336, 0, ... 04277 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04278 808 NtContinue (1244336, 0, ... 04279 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04280 808 NtContinue (1244336, 0, ... 04281 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04282 808 NtContinue (1244336, 0, ... 04283 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04284 808 NtContinue (1244336, 0, ... 04285 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04286 808 NtContinue (1244336, 0, ... 04287 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04288 808 NtContinue (1244336, 0, ... 04289 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04290 808 NtContinue (1244336, 0, ... 04291 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04292 808 NtContinue (1244336, 0, ... 04293 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04294 808 NtContinue (1244336, 0, ... 04295 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04296 808 NtContinue (1244336, 0, ... 04297 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04298 808 NtContinue (1244336, 0, ... 04299 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04300 808 NtContinue (1244336, 0, ... 04301 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04302 808 NtContinue (1244336, 0, ... 04303 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04304 808 NtContinue (1244336, 0, ... 04305 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04306 808 NtContinue (1244336, 0, ... 04307 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04308 808 NtContinue (1244336, 0, ... 04309 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04310 808 NtContinue (1244336, 0, ... 04311 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04312 808 NtContinue (1244336, 0, ... 04313 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04314 808 NtContinue (1244336, 0, ... 04315 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04316 808 NtContinue (1244336, 0, ... 04317 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04318 808 NtContinue (1244336, 0, ... 04319 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04320 808 NtContinue (1244336, 0, ... 04321 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04322 808 NtContinue (1244336, 0, ... 04323 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04324 808 NtContinue (1244336, 0, ... 04325 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04326 808 NtContinue (1244336, 0, ... 04327 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04328 808 NtContinue (1244336, 0, ... 04329 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04330 808 NtContinue (1244336, 0, ... 04331 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04332 808 NtContinue (1244336, 0, ... 04333 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04334 808 NtContinue (1244336, 0, ... 04335 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04336 808 NtContinue (1244336, 0, ... 04337 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04338 808 NtContinue (1244336, 0, ... 04339 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04340 808 NtContinue (1244336, 0, ... 04341 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04342 808 NtContinue (1244336, 0, ... 04343 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04344 808 NtContinue (1244336, 0, ... 04345 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04346 808 NtContinue (1244336, 0, ... 04347 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04348 808 NtContinue (1244336, 0, ... 04349 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04350 808 NtContinue (1244336, 0, ... 04351 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04352 808 NtContinue (1244336, 0, ... 04353 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04354 808 NtContinue (1244336, 0, ... 04355 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04356 808 NtContinue (1244336, 0, ... 04357 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04358 808 NtContinue (1244336, 0, ... 04359 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04360 808 NtContinue (1244336, 0, ... 04361 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04362 808 NtContinue (1244336, 0, ... 04363 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04364 808 NtContinue (1244336, 0, ... 04365 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04366 808 NtContinue (1244336, 0, ... 04367 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04368 808 NtContinue (1244336, 0, ... 04369 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04370 808 NtContinue (1244336, 0, ... 04371 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04372 808 NtContinue (1244336, 0, ... 04373 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04374 808 NtContinue (1244336, 0, ... 04375 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04376 808 NtContinue (1244336, 0, ... 04377 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04378 808 NtContinue (1244336, 0, ... 04379 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04380 808 NtContinue (1244336, 0, ... 04381 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04382 808 NtContinue (1244336, 0, ... 04383 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04384 808 NtContinue (1244336, 0, ... 04385 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04386 808 NtContinue (1244336, 0, ... 04387 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04388 808 NtContinue (1244336, 0, ... 04389 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04390 808 NtContinue (1244336, 0, ... 04391 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04392 808 NtContinue (1244336, 0, ... 04393 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04394 808 NtContinue (1244336, 0, ... 04395 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04396 808 NtContinue (1244336, 0, ... 04397 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04398 808 NtContinue (1244336, 0, ... 04399 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04400 808 NtContinue (1244336, 0, ... 04401 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04402 808 NtContinue (1244336, 0, ... 04403 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04404 808 NtContinue (1244336, 0, ... 04405 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04406 808 NtContinue (1244336, 0, ... 04407 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04408 808 NtContinue (1244336, 0, ... 04409 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04410 808 NtContinue (1244336, 0, ... 04411 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04412 808 NtContinue (1244336, 0, ... 04413 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04414 808 NtContinue (1244336, 0, ... 04415 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04416 808 NtContinue (1244336, 0, ... 04417 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04418 808 NtContinue (1244336, 0, ... 04419 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04420 808 NtContinue (1244336, 0, ... 04421 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04422 808 NtContinue (1244336, 0, ... 04423 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04424 808 NtContinue (1244336, 0, ... 04425 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04426 808 NtContinue (1244336, 0, ... 04427 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04428 808 NtContinue (1244336, 0, ... 04429 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04430 808 NtContinue (1244336, 0, ... 04431 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04432 808 NtContinue (1244336, 0, ... 04433 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04434 808 NtContinue (1244336, 0, ... 04435 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04436 808 NtContinue (1244336, 0, ... 04437 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04438 808 NtContinue (1244336, 0, ... 04439 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04440 808 NtContinue (1244336, 0, ... 04441 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04442 808 NtContinue (1244336, 0, ... 04443 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04444 808 NtContinue (1244336, 0, ... 04445 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04446 808 NtContinue (1244336, 0, ... 04447 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04448 808 NtContinue (1244336, 0, ... 04449 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04450 808 NtContinue (1244336, 0, ... 04451 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04452 808 NtContinue (1244336, 0, ... 04453 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04454 808 NtContinue (1244336, 0, ... 04455 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04456 808 NtContinue (1244336, 0, ... 04457 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04458 808 NtContinue (1244336, 0, ... 04459 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04460 808 NtContinue (1244336, 0, ... 04461 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04462 808 NtContinue (1244336, 0, ... 04463 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04464 808 NtContinue (1244336, 0, ... 04465 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04466 808 NtContinue (1244336, 0, ... 04467 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04468 808 NtContinue (1244336, 0, ... 04469 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04470 808 NtContinue (1244336, 0, ... 04471 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04472 808 NtContinue (1244336, 0, ... 04473 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04474 808 NtContinue (1244336, 0, ... 04475 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04476 808 NtContinue (1244336, 0, ... 04477 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04478 808 NtContinue (1244336, 0, ... 04479 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04480 808 NtContinue (1244336, 0, ... 04481 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04482 808 NtContinue (1244336, 0, ... 04483 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04484 808 NtContinue (1244336, 0, ... 04485 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04486 808 NtContinue (1244336, 0, ... 04487 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04488 808 NtContinue (1244336, 0, ... 04489 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04490 808 NtContinue (1244336, 0, ... 04491 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04492 808 NtContinue (1244336, 0, ... 04493 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04494 808 NtContinue (1244336, 0, ... 04495 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04496 808 NtContinue (1244336, 0, ... 04497 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04498 808 NtContinue (1244336, 0, ... 04499 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04500 808 NtContinue (1244336, 0, ... 04501 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04502 808 NtContinue (1244336, 0, ... 04503 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04504 808 NtContinue (1244336, 0, ... 04505 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04506 808 NtContinue (1244336, 0, ... 04507 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04508 808 NtContinue (1244336, 0, ... 04509 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04510 808 NtContinue (1244336, 0, ... 04511 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04512 808 NtContinue (1244336, 0, ... 04513 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04514 808 NtContinue (1244336, 0, ... 04515 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04516 808 NtContinue (1244336, 0, ... 04517 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04518 808 NtContinue (1244336, 0, ... 04519 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04520 808 NtContinue (1244336, 0, ... 04521 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04522 808 NtContinue (1244336, 0, ... 04523 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04524 808 NtContinue (1244336, 0, ... 04525 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04526 808 NtContinue (1244336, 0, ... 04527 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04528 808 NtContinue (1244336, 0, ... 04529 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04530 808 NtContinue (1244336, 0, ... 04531 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04532 808 NtContinue (1244336, 0, ... 04533 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04534 808 NtContinue (1244336, 0, ... 04535 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04536 808 NtContinue (1244336, 0, ... 04537 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04538 808 NtContinue (1244336, 0, ... 04539 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04540 808 NtContinue (1244336, 0, ... 04541 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04542 808 NtContinue (1244336, 0, ... 04543 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04544 808 NtContinue (1244336, 0, ... 04545 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04546 808 NtContinue (1244336, 0, ... 04547 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04548 808 NtContinue (1244336, 0, ... 04549 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04550 808 NtContinue (1244336, 0, ... 04551 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04552 808 NtContinue (1244336, 0, ... 04553 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04554 808 NtContinue (1244336, 0, ... 04555 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04556 808 NtContinue (1244336, 0, ... 04557 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04558 808 NtContinue (1244336, 0, ... 04559 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04560 808 NtContinue (1244336, 0, ... 04561 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04562 808 NtContinue (1244336, 0, ... 04563 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04564 808 NtContinue (1244336, 0, ... 04565 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04566 808 NtContinue (1244336, 0, ... 04567 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04568 808 NtContinue (1244336, 0, ... 04569 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04570 808 NtContinue (1244336, 0, ... 04571 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04572 808 NtContinue (1244336, 0, ... 04573 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04574 808 NtContinue (1244336, 0, ... 04575 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04576 808 NtContinue (1244336, 0, ... 04577 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04578 808 NtContinue (1244336, 0, ... 04579 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04580 808 NtContinue (1244336, 0, ... 04581 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04582 808 NtContinue (1244336, 0, ... 04583 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04584 808 NtContinue (1244336, 0, ... 04585 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04586 808 NtContinue (1244336, 0, ... 04587 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04588 808 NtContinue (1244336, 0, ... 04589 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04590 808 NtContinue (1244336, 0, ... 04591 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04592 808 NtContinue (1244336, 0, ... 04593 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04594 808 NtContinue (1244336, 0, ... 04595 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04596 808 NtContinue (1244336, 0, ... 04597 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04598 808 NtContinue (1244336, 0, ... 04599 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04600 808 NtContinue (1244336, 0, ... 04601 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04602 808 NtContinue (1244336, 0, ... 04603 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04604 808 NtContinue (1244336, 0, ... 04605 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04606 808 NtContinue (1244336, 0, ... 04607 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04608 808 NtContinue (1244336, 0, ... 04609 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04610 808 NtContinue (1244336, 0, ... 04611 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04612 808 NtContinue (1244336, 0, ... 04613 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04614 808 NtContinue (1244336, 0, ... 04615 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04616 808 NtContinue (1244336, 0, ... 04617 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04618 808 NtContinue (1244336, 0, ... 04619 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04620 808 NtContinue (1244336, 0, ... 04621 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04622 808 NtContinue (1244336, 0, ... 04623 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04624 808 NtContinue (1244336, 0, ... 04625 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04626 808 NtContinue (1244336, 0, ... 04627 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04628 808 NtContinue (1244336, 0, ... 04629 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04630 808 NtContinue (1244336, 0, ... 04631 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04632 808 NtContinue (1244336, 0, ... 04633 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04634 808 NtContinue (1244336, 0, ... 04635 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04636 808 NtContinue (1244336, 0, ... 04637 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04638 808 NtContinue (1244336, 0, ... 04639 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04640 808 NtContinue (1244336, 0, ... 04641 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04642 808 NtContinue (1244336, 0, ... 04643 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04644 808 NtContinue (1244336, 0, ... 04645 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04646 808 NtContinue (1244336, 0, ... 04647 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04648 808 NtContinue (1244336, 0, ... 04649 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04650 808 NtContinue (1244336, 0, ... 04651 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04652 808 NtContinue (1244336, 0, ... 04653 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04654 808 NtContinue (1244336, 0, ... 04655 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04656 808 NtContinue (1244336, 0, ... 04657 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04658 808 NtContinue (1244336, 0, ... 04659 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04660 808 NtContinue (1244336, 0, ... 04661 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04662 808 NtContinue (1244336, 0, ... 04663 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04664 808 NtContinue (1244336, 0, ... 04665 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04666 808 NtContinue (1244336, 0, ... 04667 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04668 808 NtContinue (1244336, 0, ... 04669 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04670 808 NtContinue (1244336, 0, ... 04671 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04672 808 NtContinue (1244336, 0, ... 04673 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04674 808 NtContinue (1244336, 0, ... 04675 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04676 808 NtContinue (1244336, 0, ... 04677 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04678 808 NtContinue (1244336, 0, ... 04679 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04680 808 NtContinue (1244336, 0, ... 04681 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04682 808 NtContinue (1244336, 0, ... 04683 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04684 808 NtContinue (1244336, 0, ... 04685 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04686 808 NtContinue (1244336, 0, ... 04687 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04688 808 NtContinue (1244336, 0, ... 04689 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04690 808 NtContinue (1244336, 0, ... 04691 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04692 808 NtContinue (1244336, 0, ... 04693 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04694 808 NtContinue (1244336, 0, ... 04695 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04696 808 NtContinue (1244336, 0, ... 04697 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04698 808 NtContinue (1244336, 0, ... 04699 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04700 808 NtContinue (1244336, 0, ... 04701 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04702 808 NtContinue (1244336, 0, ... 04703 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04704 808 NtContinue (1244336, 0, ... 04705 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04706 808 NtContinue (1244336, 0, ... 04707 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04708 808 NtContinue (1244336, 0, ... 04709 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04710 808 NtContinue (1244336, 0, ... 04711 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04712 808 NtContinue (1244336, 0, ... 04713 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04714 808 NtContinue (1244336, 0, ... 04715 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04716 808 NtContinue (1244336, 0, ... 04717 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04718 808 NtContinue (1244336, 0, ... 04719 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04720 808 NtContinue (1244336, 0, ... 04721 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04722 808 NtContinue (1244336, 0, ... 04723 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04724 808 NtContinue (1244336, 0, ... 04725 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04726 808 NtContinue (1244336, 0, ... 04727 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04728 808 NtContinue (1244336, 0, ... 04729 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04730 808 NtContinue (1244336, 0, ... 04731 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04732 808 NtContinue (1244336, 0, ... 04733 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04734 808 NtContinue (1244336, 0, ... 04735 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04736 808 NtContinue (1244336, 0, ... 04737 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04738 808 NtContinue (1244336, 0, ... 04739 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04740 808 NtContinue (1244336, 0, ... 04741 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04742 808 NtContinue (1244336, 0, ... 04743 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04744 808 NtContinue (1244336, 0, ... 04745 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04746 808 NtContinue (1244336, 0, ... 04747 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04748 808 NtContinue (1244336, 0, ... 04749 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04750 808 NtContinue (1244336, 0, ... 04751 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04752 808 NtContinue (1244336, 0, ... 04753 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04754 808 NtContinue (1244336, 0, ... 04755 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04756 808 NtContinue (1244336, 0, ... 04757 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04758 808 NtContinue (1244336, 0, ... 04759 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04760 808 NtContinue (1244336, 0, ... 04761 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04762 808 NtContinue (1244336, 0, ... 04763 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04764 808 NtContinue (1244336, 0, ... 04765 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04766 808 NtContinue (1244336, 0, ... 04767 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04768 808 NtContinue (1244336, 0, ... 04769 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04770 808 NtContinue (1244336, 0, ... 04771 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04772 808 NtContinue (1244336, 0, ... 04773 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04774 808 NtContinue (1244336, 0, ... 04775 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04776 808 NtContinue (1244336, 0, ... 04777 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04778 808 NtContinue (1244336, 0, ... 04779 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04780 808 NtContinue (1244336, 0, ... 04781 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04782 808 NtContinue (1244336, 0, ... 04783 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04784 808 NtContinue (1244336, 0, ... 04785 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04786 808 NtContinue (1244336, 0, ... 04787 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04788 808 NtContinue (1244336, 0, ... 04789 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04790 808 NtContinue (1244336, 0, ... 04791 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04792 808 NtContinue (1244336, 0, ... 04793 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04794 808 NtContinue (1244336, 0, ... 04795 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04796 808 NtContinue (1244336, 0, ... 04797 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04798 808 NtContinue (1244336, 0, ... 04799 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04800 808 NtContinue (1244336, 0, ... 04801 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04802 808 NtContinue (1244336, 0, ... 04803 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04804 808 NtContinue (1244336, 0, ... 04805 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04806 808 NtContinue (1244336, 0, ... 04807 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04808 808 NtContinue (1244336, 0, ... 04809 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04810 808 NtContinue (1244336, 0, ... 04811 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04812 808 NtContinue (1244336, 0, ... 04813 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04814 808 NtContinue (1244336, 0, ... 04815 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04816 808 NtContinue (1244336, 0, ... 04817 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04818 808 NtContinue (1244336, 0, ... 04819 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04820 808 NtContinue (1244336, 0, ... 04821 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04822 808 NtContinue (1244336, 0, ... 04823 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04824 808 NtContinue (1244336, 0, ... 04825 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04826 808 NtContinue (1244336, 0, ... 04827 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04828 808 NtContinue (1244336, 0, ... 04829 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04830 808 NtContinue (1244336, 0, ... 04831 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04832 808 NtContinue (1244336, 0, ... 04833 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04834 808 NtContinue (1244336, 0, ... 04835 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04836 808 NtContinue (1244336, 0, ... 04837 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04838 808 NtContinue (1244336, 0, ... 04839 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04840 808 NtContinue (1244336, 0, ... 04841 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04842 808 NtContinue (1244336, 0, ... 04843 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04844 808 NtContinue (1244336, 0, ... 04845 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04846 808 NtContinue (1244336, 0, ... 04847 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04848 808 NtContinue (1244336, 0, ... 04849 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04850 808 NtContinue (1244336, 0, ... 04851 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04852 808 NtContinue (1244336, 0, ... 04853 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04854 808 NtContinue (1244336, 0, ... 04855 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04856 808 NtContinue (1244336, 0, ... 04857 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04858 808 NtContinue (1244336, 0, ... 04859 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04860 808 NtContinue (1244336, 0, ... 04861 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04862 808 NtContinue (1244336, 0, ... 04863 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04864 808 NtContinue (1244336, 0, ... 04865 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04866 808 NtContinue (1244336, 0, ... 04867 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04868 808 NtContinue (1244336, 0, ... 04869 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04870 808 NtContinue (1244336, 0, ... 04871 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04872 808 NtContinue (1244336, 0, ... 04873 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04874 808 NtContinue (1244336, 0, ... 04875 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04876 808 NtContinue (1244336, 0, ... 04877 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04878 808 NtContinue (1244336, 0, ... 04879 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04880 808 NtContinue (1244336, 0, ... 04881 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04882 808 NtContinue (1244336, 0, ... 04883 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04884 808 NtContinue (1244336, 0, ... 04885 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04886 808 NtContinue (1244336, 0, ... 04887 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04888 808 NtContinue (1244336, 0, ... 04889 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04890 808 NtContinue (1244336, 0, ... 04891 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04892 808 NtContinue (1244336, 0, ... 04893 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04894 808 NtContinue (1244336, 0, ... 04895 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04896 808 NtContinue (1244336, 0, ... 04897 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04898 808 NtContinue (1244336, 0, ... 04899 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04900 808 NtContinue (1244336, 0, ... 04901 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04902 808 NtContinue (1244336, 0, ... 04903 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04904 808 NtContinue (1244336, 0, ... 04905 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04906 808 NtContinue (1244336, 0, ... 04907 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04908 808 NtContinue (1244336, 0, ... 04909 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04910 808 NtContinue (1244336, 0, ... 04911 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04912 808 NtContinue (1244336, 0, ... 04913 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04914 808 NtContinue (1244336, 0, ... 04915 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04916 808 NtContinue (1244336, 0, ... 04917 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04918 808 NtContinue (1244336, 0, ... 04919 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04920 808 NtContinue (1244336, 0, ... 04921 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04922 808 NtContinue (1244336, 0, ... 04923 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04924 808 NtContinue (1244336, 0, ... 04925 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04926 808 NtContinue (1244336, 0, ... 04927 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04928 808 NtContinue (1244336, 0, ... 04929 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04930 808 NtContinue (1244336, 0, ... 04931 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04932 808 NtContinue (1244336, 0, ... 04933 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04934 808 NtContinue (1244336, 0, ... 04935 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04936 808 NtContinue (1244336, 0, ... 04937 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04938 808 NtContinue (1244336, 0, ... 04939 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04940 808 NtContinue (1244336, 0, ... 04941 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04942 808 NtContinue (1244336, 0, ... 04943 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04944 808 NtContinue (1244336, 0, ... 04945 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04946 808 NtContinue (1244336, 0, ... 04947 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04948 808 NtContinue (1244336, 0, ... 04949 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04950 808 NtContinue (1244336, 0, ... 04951 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04952 808 NtContinue (1244336, 0, ... 04953 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04954 808 NtContinue (1244336, 0, ... 04955 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04956 808 NtContinue (1244336, 0, ... 04957 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04958 808 NtContinue (1244336, 0, ... 04959 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04960 808 NtContinue (1244336, 0, ... 04961 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04962 808 NtContinue (1244336, 0, ... 04963 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04964 808 NtContinue (1244336, 0, ... 04965 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04966 808 NtContinue (1244336, 0, ... 04967 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04968 808 NtContinue (1244336, 0, ... 04969 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04970 808 NtContinue (1244336, 0, ... 04971 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04972 808 NtContinue (1244336, 0, ... 04973 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04974 808 NtContinue (1244336, 0, ... 04975 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04976 808 NtContinue (1244336, 0, ... 04977 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04978 808 NtContinue (1244336, 0, ... 04979 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04980 808 NtContinue (1244336, 0, ... 04981 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04982 808 NtContinue (1244336, 0, ... 04983 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04984 808 NtContinue (1244336, 0, ... 04985 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04986 808 NtContinue (1244336, 0, ... 04987 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04988 808 NtContinue (1244336, 0, ... 04989 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04990 808 NtContinue (1244336, 0, ... 04991 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04992 808 NtContinue (1244336, 0, ... 04993 808 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0