Summary:

NtAddAtom(>) 1 NtQueryInstallUILanguage(>) 1 NtSetInformationObject(>) 2 NtUserSystemParametersInfo(>) 11
NtCallbackReturn(>) 1 NtQueryObject(>) 1 NtSetValueKey(>) 2 NtCreateSection(>) 13
NtCreateEvent(>) 1 NtQuerySymbolicLinkObject(>) 1 NtAccessCheck(>) 3 NtQueryAttributesFile(>) 14
NtCreateFile(>) 1 NtQueryVolumeInformationFile(>) 1 NtGdiCreateCompatibleDC(>) 3 NtOpenSection(>) 20
NtCreateKey(>) 1 NtReadFile(>) 1 NtSetInformationFile(>) 3 NtOpenFile(>) 21
NtCreateSemaphore(>) 1 NtRegisterThreadTerminatePort(>) 1 NtUserRegisterWindowMessage(>) 3 NtQuerySystemInformation(>) 24
NtDuplicateObject(>) 1 NtSecureConnectPort(>) 1 NtQueryDefaultLocale(>) 4 NtQueryValueKey(>) 26
NtEnumerateValueKey(>) 1 NtSetInformationProcess(>) 1 NtGdiGetStockObject(>) 5 NtAllocateVirtualMemory(>) 28
NtFsControlFile(>) 1 NtSetInformationThread(>) 1 NtOpenProcessToken(>) 5 NtMapViewOfSection(>) 29
NtGdiCreateBitmap(>) 1 NtTestAlert(>) 1 NtQueryInformationProcess(>) 5 NtUserFindExistingCursorIcon(>) 50
NtGdiInit(>) 1 NtUserCallNoParam(>) 1 NtQuerySection(>) 5 NtOpenKey(>) 60
NtGdiQueryFontAssocInfo(>) 1 NtUserCallOneParam(>) 1 NtRequestWaitReplyPort(>) 7 NtUserRegisterClassExWOW(>) 61
NtGdiSelectBitmap(>) 1 NtUserGetDC(>) 1 NtOpenProcessTokenEx(>) 8 NtFlushInstructionCache(>) 65
NtOpenEvent(>) 1 NtUserGetThreadDesktop(>) 1 NtOpenThreadTokenEx(>) 8 NtClose(>) 88
NtOpenKeyedEvent(>) 1 NtDeviceIoControlFile(>) 2 NtQueryDefaultUILanguage(>) 8 NtProtectVirtualMemory(>) 130
NtOpenProcess(>) 1 NtFreeVirtualMemory(>) 2 NtUnmapViewOfSection(>) 8 NtContinue(>) 2109
NtOpenSymbolicLinkObject(>) 1 NtGdiCreateSolidBrush(>) 2 NtQueryDebugFilterState(>) 9 NtQueryVirtualMemory(>) 2112
NtQueryInformationFile(>) 1 NtOpenDirectoryObject(>) 2 NtQueryInformationToken(>) 11

Trace:

00001 776 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 776 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 776 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 776 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 776 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 776 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 776 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 776 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 776 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 776 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 776 NtClose (12, ... ) == 0x0 00015 776 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 776 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 776 NtClose (16, ... ) == 0x0 00021 776 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 776 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 776 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 776 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 776 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 776 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 776 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0 00029 776 NtClose (16, ... ) == 0x0 00030 776 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 776 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 776 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 776 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 776 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 1304, 776, 57983, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ... {28, 56, reply, 0, 1304, 776, 57983, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 1304, 776, 57983, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ) == 0x0 00036 776 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 776 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 776 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 776 NtClose (16, ... ) == 0x0 00041 776 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 776 NtClose (16, ... ) == 0x0 00044 776 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 776 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 776 NtClose (16, ... ) == 0x0 00048 776 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 776 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 776 NtClose (16, ... ) == 0x0 00052 776 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 776 NtClose (16, ... ) == 0x0 00055 776 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 776 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 776 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 776 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 776 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 1304, 776, 57984, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ... {24, 52, reply, 0, 1304, 776, 57984, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 1304, 776, 57984, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ) == 0x0 00060 776 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 1304, 776, 57985, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ... {28, 56, reply, 0, 1304, 776, 57985, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 1304, 776, 57985, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ) == 0x0 00061 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 128, ) == 0x0 00062 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 128, ... (0x46d000), 77824, 4, ) == 0x0 00063 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00064 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00065 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00066 776 NtClose (16, ... ) == 0x0 00067 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00068 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00069 776 NtClose (16, ... ) == 0x0 00070 776 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00071 776 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00072 776 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00073 776 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00074 776 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00075 776 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00076 776 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00077 776 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00078 776 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00079 776 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00080 776 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00081 776 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00082 776 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00083 776 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00084 776 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00085 776 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00086 776 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00087 776 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00088 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00089 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00090 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00091 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "advapi32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00092 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00093 776 NtClose (16, ... ) == 0x0 00094 776 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00095 776 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00096 776 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00097 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 16, ) }, ... 16, ) == 0x0 00098 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00099 776 NtClose (16, ... ) == 0x0 00100 776 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00101 776 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00102 776 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00103 776 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00104 776 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00105 776 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00106 776 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00107 776 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00108 776 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00109 776 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00110 776 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00111 776 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00112 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00113 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00114 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00115 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00116 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00117 776 NtClose (16, ... ) == 0x0 00118 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00119 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00120 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00121 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00122 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00123 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00124 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00125 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00126 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00127 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 16, ) }, ... 16, ) == 0x0 00128 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00129 776 NtClose (16, ... ) == 0x0 00130 776 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00131 776 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00132 776 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00133 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00134 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00135 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00136 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00137 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00138 776 NtClose (16, ... ) == 0x0 00139 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00140 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00141 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00142 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00143 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00144 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00145 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00146 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00147 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00148 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00149 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00150 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00151 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00152 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00153 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00154 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00155 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00156 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00157 776 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00158 776 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00159 776 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00160 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00161 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00162 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00163 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00164 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00165 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00166 776 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00167 776 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00168 776 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00169 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00170 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00171 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00172 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00173 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00174 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00175 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00176 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c9c0000), 0x0, 8482816, ) == 0x0 00177 776 NtClose (16, ... ) == 0x0 00178 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00179 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00180 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00181 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00182 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00183 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00184 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00185 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00186 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00187 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00188 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00189 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00190 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00191 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00192 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00193 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00194 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00195 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00196 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 16, ) }, ... 16, ) == 0x0 00197 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f60000), 0x0, 483328, ) == 0x0 00198 776 NtClose (16, ... ) == 0x0 00199 776 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00200 776 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00201 776 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00202 776 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00203 776 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00204 776 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00205 776 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00206 776 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00207 776 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00208 776 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00209 776 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00210 776 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00211 776 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00212 776 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00213 776 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00214 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00215 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00216 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00217 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00218 776 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00219 776 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00220 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00221 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00222 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00223 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00224 776 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00225 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00226 776 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00227 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == 0x0 00228 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00229 776 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00230 776 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00231 776 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00232 776 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00233 776 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00234 776 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00235 776 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00236 776 NtClose (36, ... ) == 0x0 00237 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00238 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00239 776 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00240 776 NtClose (36, ... ) == 0x0 00241 776 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00242 776 NtClose (32, ... ) == 0x0 00243 776 NtClose (16, ... ) == 0x0 00244 776 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 94208, ) == 0x0 00245 776 NtClose (28, ... ) == 0x0 00246 776 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00247 776 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00248 776 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00249 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00251 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == 0x0 00252 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00253 776 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00254 776 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00255 776 NtClose (28, ... ) == 0x0 00256 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00257 776 NtClose (16, ... ) == 0x0 00258 776 NtProtectVirtualMemory (-1, (0x71aa1000), 352, 4, ... (0x71aa1000), 4096, 32, ) == 0x0 00259 776 NtProtectVirtualMemory (-1, (0x71aa1000), 4096, 32, ... (0x71aa1000), 4096, 4, ) == 0x0 00260 776 NtFlushInstructionCache (-1, 1906970624, 352, ... ) == 0x0 00261 776 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00262 776 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00263 776 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00264 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00265 776 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00266 776 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00267 776 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00268 776 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00269 776 NtReadFile (16, 0, 0, 0, 4, {205820, 0}, 0, ... {status=0x0, info=4}, (16, 0, 0, 0, 4, {205820, 0}, 0, ... {status=0x0, info=4}, "ose ", ) , ) == 0x0 00270 776 NtClose (16, ... ) == 0x0 00271 776 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00272 776 NtOpenProcessToken (-1, 0x8, ... 16, ) == 0x0 00273 776 NtQueryInformationToken (16, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00274 776 NtClose (16, ... ) == 0x0 00275 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00276 776 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00277 776 NtClose (16, ... ) == 0x0 00278 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00279 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00280 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00281 776 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 1304, 776, 57992, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ... {28, 56, reply, 0, 1304, 776, 57992, 0} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 1304, 776, 57992, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ) == 0x0 00282 776 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 16, ) }, ... 16, ) == 0x0 00283 776 NtQueryValueKey (16, (16, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00284 776 NtClose (16, ... ) == 0x0 00285 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00286 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00287 776 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00288 776 NtClose (16, ... ) == 0x0 00289 776 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00290 776 NtClose (28, ... ) == 0x0 00291 776 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00292 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00293 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00294 776 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00295 776 NtClose (28, ... ) == 0x0 00296 776 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00297 776 NtClose (16, ... ) == 0x0 00298 776 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00299 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00300 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00301 776 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00302 776 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00303 776 NtClose (16, ... ) == 0x0 00304 776 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00305 776 NtClose (28, ... ) == 0x0 00306 776 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00307 776 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00308 776 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00309 776 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00310 776 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00311 776 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00312 776 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00313 776 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00314 776 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00315 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00316 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00317 776 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00318 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00319 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00320 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00322 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00323 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00325 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00326 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00327 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00328 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00330 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00331 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00332 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 28, ) }, ... 28, ) == 0x0 00333 776 NtQueryValueKey (28, (28, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00334 776 NtClose (28, ... ) == 0x0 00335 776 NtMapViewOfSection (-2147482740, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x480000), 0x0, 1060864, ) == 0x0 00336 776 NtClose (-2147482740, ... ) == 0x0 00337 776 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 28, ) == 0x0 00338 776 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00339 776 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147482740, ) == 0x0 00340 776 NtQueryInformationToken (-2147482740, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00341 776 NtQueryInformationToken (-2147482740, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00342 776 NtClose (-2147482740, ... ) == 0x0 00343 776 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00344 776 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00345 776 NtDuplicateObject (-1, 16, -1, 0x0, 0, 2, ... 36, ) == 0x0 00346 776 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00347 776 NtQueryValueKey (-2147482740, (-2147482740, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00348 776 NtClose (-2147482740, ... ) == 0x0 00349 776 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00350 776 NtQueryValueKey (-2147482740, (-2147482740, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00351 776 NtClose (-2147482740, ... ) == 0x0 00352 776 NtQueryDefaultLocale (0, -105924276, ... ) == 0x0 00353 776 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00354 776 NtUserCallNoParam (24, ... ) == 0x0 00355 776 NtGdiCreateCompatibleDC (0, ... 00356 776 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00355 776 NtGdiCreateCompatibleDC ... ) == 0x320104e1 00357 776 NtGdiGetStockObject (0, ... ) == 0x1900010 00358 776 NtGdiGetStockObject (4, ... ) == 0x1900011 00359 776 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0x52050634 00360 776 NtGdiCreateSolidBrush (0, 0, ... 00361 776 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8978432, 4096, ) == 0x0 00360 776 NtGdiCreateSolidBrush ... ) == 0x2a100697 00362 776 NtGdiGetStockObject (13, ... ) == 0x18a0021 00363 776 NtGdiCreateCompatibleDC (0, ... ) == 0x72010798 00364 776 NtGdiSelectBitmap (1912670104, 1376060980, ... ) == 0x185000f 00365 776 NtUserGetThreadDesktop (776, 0, ... ) == 0x20 00366 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00367 776 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00368 776 NtClose (40, ... ) == 0x0 00369 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00370 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x8172c017 00371 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00372 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x8172c01c 00373 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00374 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x8172c01e 00375 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00376 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x81728002 00377 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00378 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x8172c018 00379 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00380 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x8172c01a 00381 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00382 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x8172c01d 00383 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00384 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x8172c026 00385 776 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00386 776 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x8172c019 00387 776 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8172c020 00388 776 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8172c022 00389 776 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8172c023 00390 776 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x8172c024 00391 776 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x8172c025 00392 776 NtCallbackReturn (0, 0, 0, ... 00393 776 NtGdiInit (... ) == 0x1 00394 776 NtGdiGetStockObject (18, ... ) == 0x290001c 00395 776 NtGdiGetStockObject (19, ... ) == 0x1b00019 00396 776 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00397 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00398 776 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00399 776 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00400 776 NtClose (40, ... ) == 0x0 00401 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00402 776 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00403 776 NtClose (40, ... ) == 0x0 00404 776 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00405 776 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00406 776 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00407 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00408 776 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9043968, 65536, ) == 0x0 00409 776 NtAllocateVirtualMemory (-1, 9043968, 0, 4096, 4096, 4, ... 9043968, 4096, ) == 0x0 00410 776 NtAllocateVirtualMemory (-1, 9048064, 0, 8192, 4096, 4, ... 9048064, 8192, ) == 0x0 00411 776 NtAllocateVirtualMemory (-1, 9056256, 0, 4096, 4096, 4, ... 9056256, 4096, ) == 0x0 00412 776 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00413 776 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8b0000), 0x0, 12288, ) == 0x0 00414 776 NtClose (44, ... ) == 0x0 00415 776 NtAllocateVirtualMemory (-1, 9060352, 0, 4096, 4096, 4, ... 9060352, 4096, ) == 0x0 00416 776 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00417 776 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00418 776 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00419 776 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00420 776 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00421 776 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00422 776 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\264\245\211\276\206:\223\234\334\274\25o\270M!-\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00423 776 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00424 776 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00425 776 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00426 776 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00427 776 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00428 776 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00429 776 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00430 776 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147481364, 2, ) }, 0, 0x0, 0, ... -2147481364, 2, ) == 0x0 00431 776 NtSetValueKey (-2147481364, (-2147481364, "Seed", 0, 3, "0\223\17\314R\272\366\374@\14\310\15\365\343\324\231\274j\3\36EeJ^G)u\253p\200\33Y\26\307\3060\254\367\204S\15"`2dHL\225\322\261\327\10\244\232+,\27w/}c\244\373\352\3647\226\267\356\315\343\375\12\25\211~!\221\308", 80, ... , 0, 3, (-2147481364, "Seed", 0, 3, "0\223\17\314R\272\366\374@\14\310\15\365\343\324\231\274j\3\36EeJ^G)u\253p\200\33Y\26\307\3060\254\367\204S\15"`2dHL\225\322\261\327\10\244\232+,\27w/}c\244\373\352\3647\226\267\356\315\343\375\12\25\211~!\221\308", 80, ... `2dHL\225\322\261\327\10\244\232+,\27w/}c\244\373\352\3647\226\267\356\315\343\375\12\25\211~!\221\308", 80, ... 00432 776 NtSetInformationFile (-2147482448, -105927076, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 00433 776 NtSetInformationFile (-2147482448, -105927112, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 00434 776 NtSetInformationFile (-2147482448, -105927144, 8, EndOfFile, ... {status=0x0, info=0}, ) == 0x0 00431 776 NtSetValueKey ... ) == 0x0 00435 776 NtClose (-2147481364, ... ) == 0x0 00422 776 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\10#\375\253\277AnK^\250w\223\12\344u\326\371\273\361\262{\254\325x\3102)2\270\237\366\253kJ\266jT\0\13T\200C\232\355\250\307~\330"wH\324\262\375\214Q\32\310\302\251X\245\2546{\1\227\360`>\367\317\10\261\337q\300\251\305\313\264T\367\340\354V\346'\352n\322\221R\347\270K0\27\355\3278*L\217x\14'\361]\377\215\1h\215^2\21\232T\304\14a=b\210\37\367\3237\352\201\10dr\36\2100\272\7\276\372[\363|\250\q\300BG\375\323>\31\377\344;r\32\4,\11\374\360\307\373\313\314\247\237\234\347M\276\237\12T\271\3529\277\263![\250\221Q\21\344\271\206\230\234\235\212\5\37\332\277\221;b\302\304\334}\6w\371\357\263\262\252\242\342\325\226L\324*hT=\241a\322\17\341\344@\377e\327E\13\347\373\367M\3765M\233\14\227\R\264V;\313\304\230\200Uy", ) wH\324\262\375\214Q\32\310\302\251X\245\2546{\1\227\360`>\367\317\10\261\337q\300\251\305\313\264T\367\340\354V\346'\352n\322\221R\347\270K0\27\355\3278*L\217x\14'\361]\377\215\1h\215^2\21\232T\304\14a=b\210\37\367\3237\352\201\10dr\36\2100\272\7\276\372[\363|\250\q\300BG\375\323>\31\377\344;r\32\4,\11\374\360\307\373\313\314\247\237\234\347M\276\237\12T\271\3529\277\263![\250\221Q\21\344\271\206\230\234\235\212\5\37\332\277\221;b\302\304\334}\6w\371\357\263\262\252\242\342\325\226L\324*hT=\241a\322\17\341\344@\377e\327E\13\347\373\367M\3765M\233\14\227\R\264V;\313\304\230\200Uy", ) == 0x0 00436 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00437 776 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00438 776 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00439 776 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00440 776 NtClose (48, ... ) == 0x0 00441 776 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00442 776 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00443 776 NtClose (48, ... ) == 0x0 00444 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00445 776 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00446 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00447 776 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00448 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00449 776 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00450 776 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00451 776 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00452 776 NtClose (48, ... ) == 0x0 00453 776 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00454 776 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00455 776 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00456 776 NtClose (48, ... ) == 0x0 00457 776 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00458 776 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00459 776 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00460 776 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00461 776 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00462 776 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00463 776 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00464 776 NtCreateSemaphore (0x1f0003, {24, 48, 0x80, 1333696, 0, (0x1f0003, {24, 48, 0x80, 1333696, 0, "shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}"}, 0, 2147483647, ... 52, ) }, 0, 2147483647, ... 52, ) == STATUS_OBJECT_NAME_EXISTS 00465 776 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0 00466 776 NtQueryValueKey (56, (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00467 776 NtClose (56, ... ) == 0x0 00468 776 NtQueryDefaultUILanguage (1241692, ... 00469 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00470 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481364, ) == 0x0 00471 776 NtQueryInformationToken (-2147481364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00472 776 NtClose (-2147481364, ... ) == 0x0 00473 776 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481364, ) }, ... -2147481364, ) == 0x0 00474 776 NtOpenKey (0x80000000, {24, -2147481364, 0x240, 0, 0, (0x80000000, {24, -2147481364, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00475 776 NtOpenKey (0x80000000, {24, -2147481364, 0x640, 0, 0, (0x80000000, {24, -2147481364, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481336, ) }, ... -2147481336, ) == 0x0 00476 776 NtQueryValueKey (-2147481336, (-2147481336, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00477 776 NtClose (-2147481336, ... ) == 0x0 00478 776 NtClose (-2147481364, ... ) == 0x0 00468 776 NtQueryDefaultUILanguage ... ) == 0x0 00479 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00480 776 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0 00481 776 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 8462336, ) == 0x0 00482 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00483 776 NtQueryDefaultUILanguage (2090319928, ... 00484 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00485 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481364, ) == 0x0 00486 776 NtQueryInformationToken (-2147481364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00487 776 NtClose (-2147481364, ... ) == 0x0 00488 776 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481364, ) }, ... -2147481364, ) == 0x0 00489 776 NtOpenKey (0x80000000, {24, -2147481364, 0x240, 0, 0, (0x80000000, {24, -2147481364, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00490 776 NtOpenKey (0x80000000, {24, -2147481364, 0x640, 0, 0, (0x80000000, {24, -2147481364, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481336, ) }, ... -2147481336, ) == 0x0 00491 776 NtQueryValueKey (-2147481336, (-2147481336, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00492 776 NtClose (-2147481336, ... ) == 0x0 00493 776 NtClose (-2147481364, ... ) == 0x0 00483 776 NtQueryDefaultUILanguage ... ) == 0x0 00494 776 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00495 776 NtQueryDefaultLocale (1, 1239788, ... ) == 0x0 00496 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00497 776 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1304, 776, 58008, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1304, 776, 58008, 0} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1304, 776, 58008, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ) == 0x0 00498 776 NtClose (56, ... ) == 0x0 00499 776 NtClose (60, ... ) == 0x0 00500 776 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00501 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00502 776 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00503 776 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00504 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00505 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00506 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238980, ... ) }, 1238980, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00507 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00508 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00509 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00510 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 1239044, ... ) }, 1239044, ... ) == 0x0 00511 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0 00512 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00513 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00514 776 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00515 776 NtClose (56, ... ) == 0x0 00516 776 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 1056768, ) == 0x0 00517 776 NtClose (64, ... ) == 0x0 00518 776 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00519 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00520 776 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0 00521 776 NtQuerySection (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00522 776 NtClose (64, ... ) == 0x0 00523 776 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 1060864, ) == 0x0 00524 776 NtClose (56, ... ) == 0x0 00525 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00526 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00527 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00528 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00529 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00530 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00531 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00532 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00533 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00534 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00535 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00536 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00537 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00538 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00539 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00540 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00541 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00542 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00543 776 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00544 776 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00545 776 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00546 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00547 776 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240524, ... ) , 42, 1240524, ... ) == 0x0 00548 776 NtQueryDefaultUILanguage (1239208, ... 00549 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00550 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481364, ) == 0x0 00551 776 NtQueryInformationToken (-2147481364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00552 776 NtClose (-2147481364, ... ) == 0x0 00553 776 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481364, ) }, ... -2147481364, ) == 0x0 00554 776 NtOpenKey (0x80000000, {24, -2147481364, 0x240, 0, 0, (0x80000000, {24, -2147481364, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00555 776 NtOpenKey (0x80000000, {24, -2147481364, 0x640, 0, 0, (0x80000000, {24, -2147481364, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481336, ) }, ... -2147481336, ) == 0x0 00556 776 NtQueryValueKey (-2147481336, (-2147481336, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00557 776 NtClose (-2147481336, ... ) == 0x0 00558 776 NtClose (-2147481364, ... ) == 0x0 00548 776 NtQueryDefaultUILanguage ... ) == 0x0 00559 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238048, ... ) }, 1238048, ... ) == 0x0 00560 776 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00561 776 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00562 776 NtClose (56, ... ) == 0x0 00563 776 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 4096, ) == 0x0 00564 776 NtClose (64, ... ) == 0x0 00565 776 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00566 776 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237644, ... ) }, 1237644, ... ) == 0x0 00567 776 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1238388, (0x80100080, {24, 0, 0x40, 0, 1238388, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0 00568 776 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00569 776 NtClose (64, ... ) == 0x0 00570 776 NtMapViewOfSection (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8c0000), {0, 0}, 4096, ) == 0x0 00571 776 NtClose (56, ... ) == 0x0 00572 776 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00573 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00574 776 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0 00575 776 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 4096, ) == 0x0 00576 776 NtQueryInformationFile (56, 1238040, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00577 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00578 776 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1304, 776, 58009, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1304, 776, 58009, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1304, 776, 58009, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ) == 0x0 00579 776 NtClose (56, ... ) == 0x0 00580 776 NtClose (64, ... ) == 0x0 00581 776 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00582 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00583 776 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00584 776 NtUserSystemParametersInfo (104, 0, 2001084812, 0, ... ) == 0x1 00585 776 NtUserGetDC (0, ... ) == 0x1010052 00586 776 NtUserCallOneParam (16842834, 57, ... ) == 0x1 00587 776 NtUserSystemParametersInfo (38, 4, 2001086940, 0, ... ) == 0x1 00588 776 NtUserSystemParametersInfo (66, 12, 1240040, 0, ... ) == 0x1 00589 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00590 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 64, ) == 0x0 00591 776 NtQueryInformationToken (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00592 776 NtClose (64, ... ) == 0x0 00593 776 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 64, ) }, ... 64, ) == 0x0 00594 776 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00595 776 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00596 776 NtClose (56, ... ) == 0x0 00597 776 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0 00598 776 NtQueryValueKey (56, (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00599 776 NtClose (56, ... ) == 0x0 00600 776 NtUserSystemParametersInfo (41, 500, 1240068, 0, ... ) == 0x1 00601 776 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00602 776 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00603 776 NtClose (56, ... ) == 0x0 00604 776 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0 00605 776 NtQueryValueKey (56, (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00606 776 NtClose (56, ... ) == 0x0 00607 776 NtUserSystemParametersInfo (27, 0, 2001085788, 0, ... ) == 0x1 00608 776 NtUserSystemParametersInfo (102, 0, 2001086828, 0, ... ) == 0x1 00609 776 NtClose (64, ... ) == 0x0 00610 776 NtUserSystemParametersInfo (4130, 0, 1240572, 0, ... ) == 0x1 00611 776 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 64, ) }, ... 64, ) == 0x0 00612 776 NtEnumerateValueKey (64, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00613 776 NtClose (64, ... ) == 0x0 00614 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00615 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c03b 00616 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c03d 00617 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00618 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c03f 00619 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00620 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c041 00621 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00622 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c043 00623 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c045 00624 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00625 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c047 00626 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00627 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c049 00628 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00629 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c04b 00630 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00631 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c04d 00632 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00633 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c04f 00634 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c051 00635 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00636 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c053 00637 776 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00638 776 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8172c055 00639 776 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00640 776 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x8172c057 00641 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00642 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c059 00643 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00644 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c05b 00645 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00646 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c05d 00647 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00648 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c05f 00649 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00650 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c017 00651 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00652 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c019 00653 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00654 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c018 00655 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00656 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c01a 00657 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00658 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c01c 00659 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00660 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c01e 00661 776 NtUserFindExistingCursorIcon (1239812, 1239828, 1239876, ... ) == 0x10011 00662 776 NtUserRegisterClassExWOW (1239812, 1239880, 1239896, 1239912, 0, 384, 0, ... ) == 0x8172c01b 00663 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00664 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c068 00665 776 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00666 776 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x8172c06a 00667 776 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 64, ) }, ... 64, ) == 0x0 00668 776 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5d090000), 0x0, 630784, ) == 0x0 00669 776 NtClose (64, ... ) == 0x0 00670 776 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00671 776 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00672 776 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00673 776 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00674 776 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00675 776 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00676 776 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00677 776 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00678 776 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00679 776 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00680 776 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00681 776 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00682 776 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00683 776 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00684 776 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00685 776 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00686 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00687 776 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0 00688 776 NtAllocateVirtualMemory (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0 00689 776 NtAllocateVirtualMemory (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0 00690 776 NtAllocateVirtualMemory (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0 00691 776 NtAllocateVirtualMemory (-1, 9191424, 0, 4096, 4096, 4, ... 9191424, 4096, ) == 0x0 00692 776 NtQueryDefaultUILanguage (1239820, ... 00693 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00694 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147481364, ) == 0x0 00695 776 NtQueryInformationToken (-2147481364, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00696 776 NtClose (-2147481364, ... ) == 0x0 00697 776 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147481364, ) }, ... -2147481364, ) == 0x0 00698 776 NtOpenKey (0x80000000, {24, -2147481364, 0x240, 0, 0, (0x80000000, {24, -2147481364, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00699 776 NtOpenKey (0x80000000, {24, -2147481364, 0x640, 0, 0, (0x80000000, {24, -2147481364, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481336, ) }, ... -2147481336, ) == 0x0 00700 776 NtQueryValueKey (-2147481336, (-2147481336, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00701 776 NtClose (-2147481336, ... ) == 0x0 00702 776 NtClose (-2147481364, ... ) == 0x0 00692 776 NtQueryDefaultUILanguage ... ) == 0x0 00703 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll"}, 1, 96, ... 64, {status=0x0, info=1}, ) }, 1, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00704 776 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00705 776 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 618496, ) == 0x0 00706 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00707 776 NtQueryDefaultLocale (1, 1237916, ... ) == 0x0 00708 776 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00709 776 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1304, 776, 58010, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1304, 776, 58010, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1304, 776, 58010, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ) == 0x0 00710 776 NtClose (64, ... ) == 0x0 00711 776 NtClose (56, ... ) == 0x0 00712 776 NtUnmapViewOfSection (-1, 0x8e0000, ... ) == 0x0 00713 776 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00714 776 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {1304, 0}, ... 56, ) == 0x0 00715 776 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00716 776 NtClose (56, ... ) == 0x0 00717 776 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00718 776 NtUserSystemParametersInfo (104, 0, 1561338260, 0, ... ) == 0x1 00719 776 NtUserSystemParametersInfo (38, 4, 1561337988, 0, ... ) == 0x1 00720 776 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00721 776 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00722 776 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00723 776 NtClose (56, ... ) == 0x0 00724 776 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 56, ) }, ... 56, ) == 0x0 00725 776 NtOpenProcessToken (-1, 0x8, ... 64, ) == 0x0 00726 776 NtAccessCheck (1332816, 64, 0x1, 1241012, 1241064, 56, 1241044, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00727 776 NtClose (64, ... ) == 0x0 00728 776 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00729 776 NtQueryValueKey (64, (64, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00730 776 NtClose (64, ... ) == 0x0 00731 776 NtUserSystemParametersInfo (41, 500, 1241192, 0, ... ) == 0x1 00732 776 NtUserSystemParametersInfo (102, 0, 1561338280, 0, ... ) == 0x1 00733 776 NtClose (56, ... ) == 0x0 00734 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00735 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c03b 00736 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c03d 00737 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00738 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c03f 00739 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00740 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c041 00741 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00742 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c043 00743 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c045 00744 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00745 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c047 00746 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00747 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c049 00748 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00749 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c04b 00750 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00751 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c04d 00752 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00753 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c04f 00754 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c051 00755 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00756 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c053 00757 776 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00758 776 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8172c055 00759 776 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00760 776 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x8172c057 00761 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00762 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c059 00763 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10013 00764 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c05b 00765 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00766 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c05d 00767 776 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00768 776 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x8172c05f 00769 776 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00770 776 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00771 776 NtTestAlert (... ) == 0x0 00772 776 NtContinue (1244464, 1, ... 00773 776 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x411704,}, 4, ... ) == 0x0 00774 776 NtQueryVirtualMemory (-1, 0x47d64b, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00775 776 NtContinue (1244336, 0, ... 00776 776 NtAllocateVirtualMemory (-1, 0, 0, 122368, 4096, 4, ... 9306112, 122880, ) == 0x0 00777 776 NtQueryVirtualMemory (-1, 0x47d8c6, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00778 776 NtContinue (1244320, 0, ... 00779 776 NtAllocateVirtualMemory (-1, 0, 0, 147456, 4096, 4, ... 9437184, 147456, ) == 0x0 00780 776 NtQueryVirtualMemory (-1, 0x47d9f0, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00781 776 NtContinue (1244320, 0, ... 00782 776 NtQueryVirtualMemory (-1, 0x47dae3, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00783 776 NtContinue (1244328, 0, ... 00784 776 NtQueryVirtualMemory (-1, 0x47dbcf, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00785 776 NtContinue (1244316, 0, ... 00786 776 NtQueryVirtualMemory (-1, 0x47dcf3, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00787 776 NtContinue (1244328, 0, ... 00788 776 NtQueryVirtualMemory (-1, 0x47de0b, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00789 776 NtContinue (1244336, 0, ... 00790 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00791 776 NtContinue (1244328, 0, ... 00792 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00793 776 NtContinue (1244328, 0, ... 00794 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00795 776 NtContinue (1244328, 0, ... 00796 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00797 776 NtContinue (1244328, 0, ... 00798 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00799 776 NtContinue (1244328, 0, ... 00800 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00801 776 NtContinue (1244328, 0, ... 00802 776 NtQueryVirtualMemory (-1, 0x47dfc4, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00803 776 NtContinue (1244328, 0, ... 00804 776 NtFreeVirtualMemory (-1, (0x8e0000), 122368, 16384, ... (0x8e0000), 122880, ) == 0x0 00805 776 NtQueryVirtualMemory (-1, 0x47e2de, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00806 776 NtContinue (1244336, 0, ... 00807 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00808 776 NtContinue (1244336, 0, ... 00809 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00810 776 NtContinue (1244336, 0, ... 00811 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00812 776 NtContinue (1244336, 0, ... 00813 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00814 776 NtContinue (1244336, 0, ... 00815 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00816 776 NtContinue (1244336, 0, ... 00817 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00818 776 NtContinue (1244336, 0, ... 00819 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00820 776 NtContinue (1244336, 0, ... 00821 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00822 776 NtContinue (1244336, 0, ... 00823 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00824 776 NtContinue (1244336, 0, ... 00825 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00826 776 NtContinue (1244336, 0, ... 00827 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00828 776 NtContinue (1244336, 0, ... 00829 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00830 776 NtContinue (1244336, 0, ... 00831 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00832 776 NtContinue (1244336, 0, ... 00833 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00834 776 NtContinue (1244336, 0, ... 00835 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00836 776 NtContinue (1244336, 0, ... 00837 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00838 776 NtContinue (1244336, 0, ... 00839 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00840 776 NtContinue (1244336, 0, ... 00841 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00842 776 NtContinue (1244336, 0, ... 00843 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00844 776 NtContinue (1244336, 0, ... 00845 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00846 776 NtContinue (1244336, 0, ... 00847 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00848 776 NtContinue (1244336, 0, ... 00849 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00850 776 NtContinue (1244336, 0, ... 00851 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00852 776 NtContinue (1244336, 0, ... 00853 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00854 776 NtContinue (1244336, 0, ... 00855 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00856 776 NtContinue (1244336, 0, ... 00857 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00858 776 NtContinue (1244336, 0, ... 00859 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00860 776 NtContinue (1244336, 0, ... 00861 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00862 776 NtContinue (1244336, 0, ... 00863 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00864 776 NtContinue (1244336, 0, ... 00865 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00866 776 NtContinue (1244336, 0, ... 00867 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00868 776 NtContinue (1244336, 0, ... 00869 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00870 776 NtContinue (1244336, 0, ... 00871 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00872 776 NtContinue (1244336, 0, ... 00873 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00874 776 NtContinue (1244336, 0, ... 00875 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00876 776 NtContinue (1244336, 0, ... 00877 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00878 776 NtContinue (1244336, 0, ... 00879 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00880 776 NtContinue (1244336, 0, ... 00881 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00882 776 NtContinue (1244336, 0, ... 00883 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00884 776 NtContinue (1244336, 0, ... 00885 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00886 776 NtContinue (1244336, 0, ... 00887 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00888 776 NtContinue (1244336, 0, ... 00889 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00890 776 NtContinue (1244336, 0, ... 00891 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00892 776 NtContinue (1244336, 0, ... 00893 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00894 776 NtContinue (1244336, 0, ... 00895 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00896 776 NtContinue (1244336, 0, ... 00897 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00898 776 NtContinue (1244336, 0, ... 00899 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00900 776 NtContinue (1244336, 0, ... 00901 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00902 776 NtContinue (1244336, 0, ... 00903 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00904 776 NtContinue (1244336, 0, ... 00905 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00906 776 NtContinue (1244336, 0, ... 00907 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00908 776 NtContinue (1244336, 0, ... 00909 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00910 776 NtContinue (1244336, 0, ... 00911 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00912 776 NtContinue (1244336, 0, ... 00913 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00914 776 NtContinue (1244336, 0, ... 00915 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00916 776 NtContinue (1244336, 0, ... 00917 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00918 776 NtContinue (1244336, 0, ... 00919 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00920 776 NtContinue (1244336, 0, ... 00921 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00922 776 NtContinue (1244336, 0, ... 00923 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00924 776 NtContinue (1244336, 0, ... 00925 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00926 776 NtContinue (1244336, 0, ... 00927 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00928 776 NtContinue (1244336, 0, ... 00929 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00930 776 NtContinue (1244336, 0, ... 00931 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00932 776 NtContinue (1244336, 0, ... 00933 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00934 776 NtContinue (1244336, 0, ... 00935 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00936 776 NtContinue (1244336, 0, ... 00937 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00938 776 NtContinue (1244336, 0, ... 00939 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00940 776 NtContinue (1244336, 0, ... 00941 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00942 776 NtContinue (1244336, 0, ... 00943 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00944 776 NtContinue (1244336, 0, ... 00945 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00946 776 NtContinue (1244336, 0, ... 00947 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00948 776 NtContinue (1244336, 0, ... 00949 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00950 776 NtContinue (1244336, 0, ... 00951 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00952 776 NtContinue (1244336, 0, ... 00953 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00954 776 NtContinue (1244336, 0, ... 00955 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00956 776 NtContinue (1244336, 0, ... 00957 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00958 776 NtContinue (1244336, 0, ... 00959 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00960 776 NtContinue (1244336, 0, ... 00961 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00962 776 NtContinue (1244336, 0, ... 00963 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00964 776 NtContinue (1244336, 0, ... 00965 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00966 776 NtContinue (1244336, 0, ... 00967 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00968 776 NtContinue (1244336, 0, ... 00969 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00970 776 NtContinue (1244336, 0, ... 00971 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00972 776 NtContinue (1244336, 0, ... 00973 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00974 776 NtContinue (1244336, 0, ... 00975 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00976 776 NtContinue (1244336, 0, ... 00977 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00978 776 NtContinue (1244336, 0, ... 00979 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00980 776 NtContinue (1244336, 0, ... 00981 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00982 776 NtContinue (1244336, 0, ... 00983 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00984 776 NtContinue (1244336, 0, ... 00985 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00986 776 NtContinue (1244336, 0, ... 00987 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00988 776 NtContinue (1244336, 0, ... 00989 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00990 776 NtContinue (1244336, 0, ... 00991 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00992 776 NtContinue (1244336, 0, ... 00993 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00994 776 NtContinue (1244336, 0, ... 00995 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00996 776 NtContinue (1244336, 0, ... 00997 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00998 776 NtContinue (1244336, 0, ... 00999 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01000 776 NtContinue (1244336, 0, ... 01001 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01002 776 NtContinue (1244336, 0, ... 01003 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01004 776 NtContinue (1244336, 0, ... 01005 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01006 776 NtContinue (1244336, 0, ... 01007 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01008 776 NtContinue (1244336, 0, ... 01009 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01010 776 NtContinue (1244336, 0, ... 01011 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01012 776 NtContinue (1244336, 0, ... 01013 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01014 776 NtContinue (1244336, 0, ... 01015 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01016 776 NtContinue (1244336, 0, ... 01017 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01018 776 NtContinue (1244336, 0, ... 01019 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01020 776 NtContinue (1244336, 0, ... 01021 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01022 776 NtContinue (1244336, 0, ... 01023 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01024 776 NtContinue (1244336, 0, ... 01025 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01026 776 NtContinue (1244336, 0, ... 01027 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01028 776 NtContinue (1244336, 0, ... 01029 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01030 776 NtContinue (1244336, 0, ... 01031 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01032 776 NtContinue (1244336, 0, ... 01033 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01034 776 NtContinue (1244336, 0, ... 01035 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01036 776 NtContinue (1244336, 0, ... 01037 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01038 776 NtContinue (1244336, 0, ... 01039 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01040 776 NtContinue (1244336, 0, ... 01041 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01042 776 NtContinue (1244336, 0, ... 01043 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01044 776 NtContinue (1244336, 0, ... 01045 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01046 776 NtContinue (1244336, 0, ... 01047 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01048 776 NtContinue (1244336, 0, ... 01049 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01050 776 NtContinue (1244336, 0, ... 01051 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01052 776 NtContinue (1244336, 0, ... 01053 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01054 776 NtContinue (1244336, 0, ... 01055 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01056 776 NtContinue (1244336, 0, ... 01057 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01058 776 NtContinue (1244336, 0, ... 01059 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01060 776 NtContinue (1244336, 0, ... 01061 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01062 776 NtContinue (1244336, 0, ... 01063 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01064 776 NtContinue (1244336, 0, ... 01065 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01066 776 NtContinue (1244336, 0, ... 01067 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01068 776 NtContinue (1244336, 0, ... 01069 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01070 776 NtContinue (1244336, 0, ... 01071 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01072 776 NtContinue (1244336, 0, ... 01073 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01074 776 NtContinue (1244336, 0, ... 01075 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01076 776 NtContinue (1244336, 0, ... 01077 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01078 776 NtContinue (1244336, 0, ... 01079 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01080 776 NtContinue (1244336, 0, ... 01081 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01082 776 NtContinue (1244336, 0, ... 01083 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01084 776 NtContinue (1244336, 0, ... 01085 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01086 776 NtContinue (1244336, 0, ... 01087 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01088 776 NtContinue (1244336, 0, ... 01089 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01090 776 NtContinue (1244336, 0, ... 01091 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01092 776 NtContinue (1244336, 0, ... 01093 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01094 776 NtContinue (1244336, 0, ... 01095 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01096 776 NtContinue (1244336, 0, ... 01097 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01098 776 NtContinue (1244336, 0, ... 01099 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01100 776 NtContinue (1244336, 0, ... 01101 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01102 776 NtContinue (1244336, 0, ... 01103 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01104 776 NtContinue (1244336, 0, ... 01105 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01106 776 NtContinue (1244336, 0, ... 01107 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01108 776 NtContinue (1244336, 0, ... 01109 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01110 776 NtContinue (1244336, 0, ... 01111 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01112 776 NtContinue (1244336, 0, ... 01113 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01114 776 NtContinue (1244336, 0, ... 01115 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01116 776 NtContinue (1244336, 0, ... 01117 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01118 776 NtContinue (1244336, 0, ... 01119 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01120 776 NtContinue (1244336, 0, ... 01121 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01122 776 NtContinue (1244336, 0, ... 01123 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01124 776 NtContinue (1244336, 0, ... 01125 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01126 776 NtContinue (1244336, 0, ... 01127 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01128 776 NtContinue (1244336, 0, ... 01129 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01130 776 NtContinue (1244336, 0, ... 01131 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01132 776 NtContinue (1244336, 0, ... 01133 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01134 776 NtContinue (1244336, 0, ... 01135 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01136 776 NtContinue (1244336, 0, ... 01137 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01138 776 NtContinue (1244336, 0, ... 01139 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01140 776 NtContinue (1244336, 0, ... 01141 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01142 776 NtContinue (1244336, 0, ... 01143 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01144 776 NtContinue (1244336, 0, ... 01145 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01146 776 NtContinue (1244336, 0, ... 01147 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01148 776 NtContinue (1244336, 0, ... 01149 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01150 776 NtContinue (1244336, 0, ... 01151 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01152 776 NtContinue (1244336, 0, ... 01153 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01154 776 NtContinue (1244336, 0, ... 01155 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01156 776 NtContinue (1244336, 0, ... 01157 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01158 776 NtContinue (1244336, 0, ... 01159 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01160 776 NtContinue (1244336, 0, ... 01161 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01162 776 NtContinue (1244336, 0, ... 01163 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01164 776 NtContinue (1244336, 0, ... 01165 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01166 776 NtContinue (1244336, 0, ... 01167 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01168 776 NtContinue (1244336, 0, ... 01169 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01170 776 NtContinue (1244336, 0, ... 01171 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01172 776 NtContinue (1244336, 0, ... 01173 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01174 776 NtContinue (1244336, 0, ... 01175 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01176 776 NtContinue (1244336, 0, ... 01177 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01178 776 NtContinue (1244336, 0, ... 01179 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01180 776 NtContinue (1244336, 0, ... 01181 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01182 776 NtContinue (1244336, 0, ... 01183 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01184 776 NtContinue (1244336, 0, ... 01185 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01186 776 NtContinue (1244336, 0, ... 01187 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01188 776 NtContinue (1244336, 0, ... 01189 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01190 776 NtContinue (1244336, 0, ... 01191 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01192 776 NtContinue (1244336, 0, ... 01193 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01194 776 NtContinue (1244336, 0, ... 01195 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01196 776 NtContinue (1244336, 0, ... 01197 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01198 776 NtContinue (1244336, 0, ... 01199 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01200 776 NtContinue (1244336, 0, ... 01201 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01202 776 NtContinue (1244336, 0, ... 01203 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01204 776 NtContinue (1244336, 0, ... 01205 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01206 776 NtContinue (1244336, 0, ... 01207 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01208 776 NtContinue (1244336, 0, ... 01209 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01210 776 NtContinue (1244336, 0, ... 01211 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01212 776 NtContinue (1244336, 0, ... 01213 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01214 776 NtContinue (1244336, 0, ... 01215 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01216 776 NtContinue (1244336, 0, ... 01217 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01218 776 NtContinue (1244336, 0, ... 01219 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01220 776 NtContinue (1244336, 0, ... 01221 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01222 776 NtContinue (1244336, 0, ... 01223 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01224 776 NtContinue (1244336, 0, ... 01225 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01226 776 NtContinue (1244336, 0, ... 01227 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01228 776 NtContinue (1244336, 0, ... 01229 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01230 776 NtContinue (1244336, 0, ... 01231 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01232 776 NtContinue (1244336, 0, ... 01233 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01234 776 NtContinue (1244336, 0, ... 01235 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01236 776 NtContinue (1244336, 0, ... 01237 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01238 776 NtContinue (1244336, 0, ... 01239 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01240 776 NtContinue (1244336, 0, ... 01241 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01242 776 NtContinue (1244336, 0, ... 01243 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01244 776 NtContinue (1244336, 0, ... 01245 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01246 776 NtContinue (1244336, 0, ... 01247 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01248 776 NtContinue (1244336, 0, ... 01249 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01250 776 NtContinue (1244336, 0, ... 01251 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01252 776 NtContinue (1244336, 0, ... 01253 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01254 776 NtContinue (1244336, 0, ... 01255 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01256 776 NtContinue (1244336, 0, ... 01257 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01258 776 NtContinue (1244336, 0, ... 01259 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01260 776 NtContinue (1244336, 0, ... 01261 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01262 776 NtContinue (1244336, 0, ... 01263 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01264 776 NtContinue (1244336, 0, ... 01265 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01266 776 NtContinue (1244336, 0, ... 01267 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01268 776 NtContinue (1244336, 0, ... 01269 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01270 776 NtContinue (1244336, 0, ... 01271 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01272 776 NtContinue (1244336, 0, ... 01273 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01274 776 NtContinue (1244336, 0, ... 01275 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01276 776 NtContinue (1244336, 0, ... 01277 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01278 776 NtContinue (1244336, 0, ... 01279 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01280 776 NtContinue (1244336, 0, ... 01281 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01282 776 NtContinue (1244336, 0, ... 01283 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01284 776 NtContinue (1244336, 0, ... 01285 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01286 776 NtContinue (1244336, 0, ... 01287 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01288 776 NtContinue (1244336, 0, ... 01289 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01290 776 NtContinue (1244336, 0, ... 01291 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01292 776 NtContinue (1244336, 0, ... 01293 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01294 776 NtContinue (1244336, 0, ... 01295 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01296 776 NtContinue (1244336, 0, ... 01297 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01298 776 NtContinue (1244336, 0, ... 01299 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01300 776 NtContinue (1244336, 0, ... 01301 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01302 776 NtContinue (1244336, 0, ... 01303 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01304 776 NtContinue (1244336, 0, ... 01305 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01306 776 NtContinue (1244336, 0, ... 01307 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01308 776 NtContinue (1244336, 0, ... 01309 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01310 776 NtContinue (1244336, 0, ... 01311 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01312 776 NtContinue (1244336, 0, ... 01313 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01314 776 NtContinue (1244336, 0, ... 01315 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01316 776 NtContinue (1244336, 0, ... 01317 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01318 776 NtContinue (1244336, 0, ... 01319 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01320 776 NtContinue (1244336, 0, ... 01321 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01322 776 NtContinue (1244336, 0, ... 01323 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01324 776 NtContinue (1244336, 0, ... 01325 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01326 776 NtContinue (1244336, 0, ... 01327 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01328 776 NtContinue (1244336, 0, ... 01329 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01330 776 NtContinue (1244336, 0, ... 01331 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01332 776 NtContinue (1244336, 0, ... 01333 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01334 776 NtContinue (1244336, 0, ... 01335 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01336 776 NtContinue (1244336, 0, ... 01337 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01338 776 NtContinue (1244336, 0, ... 01339 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01340 776 NtContinue (1244336, 0, ... 01341 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01342 776 NtContinue (1244336, 0, ... 01343 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01344 776 NtContinue (1244336, 0, ... 01345 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01346 776 NtContinue (1244336, 0, ... 01347 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01348 776 NtContinue (1244336, 0, ... 01349 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01350 776 NtContinue (1244336, 0, ... 01351 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01352 776 NtContinue (1244336, 0, ... 01353 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01354 776 NtContinue (1244336, 0, ... 01355 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01356 776 NtContinue (1244336, 0, ... 01357 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01358 776 NtContinue (1244336, 0, ... 01359 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01360 776 NtContinue (1244336, 0, ... 01361 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01362 776 NtContinue (1244336, 0, ... 01363 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01364 776 NtContinue (1244336, 0, ... 01365 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01366 776 NtContinue (1244336, 0, ... 01367 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01368 776 NtContinue (1244336, 0, ... 01369 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01370 776 NtContinue (1244336, 0, ... 01371 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01372 776 NtContinue (1244336, 0, ... 01373 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01374 776 NtContinue (1244336, 0, ... 01375 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01376 776 NtContinue (1244336, 0, ... 01377 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01378 776 NtContinue (1244336, 0, ... 01379 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01380 776 NtContinue (1244336, 0, ... 01381 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01382 776 NtContinue (1244336, 0, ... 01383 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01384 776 NtContinue (1244336, 0, ... 01385 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01386 776 NtContinue (1244336, 0, ... 01387 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01388 776 NtContinue (1244336, 0, ... 01389 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01390 776 NtContinue (1244336, 0, ... 01391 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01392 776 NtContinue (1244336, 0, ... 01393 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01394 776 NtContinue (1244336, 0, ... 01395 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01396 776 NtContinue (1244336, 0, ... 01397 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01398 776 NtContinue (1244336, 0, ... 01399 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01400 776 NtContinue (1244336, 0, ... 01401 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01402 776 NtContinue (1244336, 0, ... 01403 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01404 776 NtContinue (1244336, 0, ... 01405 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01406 776 NtContinue (1244336, 0, ... 01407 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01408 776 NtContinue (1244336, 0, ... 01409 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01410 776 NtContinue (1244336, 0, ... 01411 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01412 776 NtContinue (1244336, 0, ... 01413 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01414 776 NtContinue (1244336, 0, ... 01415 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01416 776 NtContinue (1244336, 0, ... 01417 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01418 776 NtContinue (1244336, 0, ... 01419 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01420 776 NtContinue (1244336, 0, ... 01421 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01422 776 NtContinue (1244336, 0, ... 01423 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01424 776 NtContinue (1244336, 0, ... 01425 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01426 776 NtContinue (1244336, 0, ... 01427 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01428 776 NtContinue (1244336, 0, ... 01429 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01430 776 NtContinue (1244336, 0, ... 01431 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01432 776 NtContinue (1244336, 0, ... 01433 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01434 776 NtContinue (1244336, 0, ... 01435 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01436 776 NtContinue (1244336, 0, ... 01437 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01438 776 NtContinue (1244336, 0, ... 01439 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01440 776 NtContinue (1244336, 0, ... 01441 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01442 776 NtContinue (1244336, 0, ... 01443 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01444 776 NtContinue (1244336, 0, ... 01445 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01446 776 NtContinue (1244336, 0, ... 01447 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01448 776 NtContinue (1244336, 0, ... 01449 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01450 776 NtContinue (1244336, 0, ... 01451 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01452 776 NtContinue (1244336, 0, ... 01453 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01454 776 NtContinue (1244336, 0, ... 01455 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01456 776 NtContinue (1244336, 0, ... 01457 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01458 776 NtContinue (1244336, 0, ... 01459 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01460 776 NtContinue (1244336, 0, ... 01461 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01462 776 NtContinue (1244336, 0, ... 01463 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01464 776 NtContinue (1244336, 0, ... 01465 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01466 776 NtContinue (1244336, 0, ... 01467 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01468 776 NtContinue (1244336, 0, ... 01469 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01470 776 NtContinue (1244336, 0, ... 01471 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01472 776 NtContinue (1244336, 0, ... 01473 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01474 776 NtContinue (1244336, 0, ... 01475 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01476 776 NtContinue (1244336, 0, ... 01477 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01478 776 NtContinue (1244336, 0, ... 01479 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01480 776 NtContinue (1244336, 0, ... 01481 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01482 776 NtContinue (1244336, 0, ... 01483 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01484 776 NtContinue (1244336, 0, ... 01485 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01486 776 NtContinue (1244336, 0, ... 01487 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01488 776 NtContinue (1244336, 0, ... 01489 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01490 776 NtContinue (1244336, 0, ... 01491 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01492 776 NtContinue (1244336, 0, ... 01493 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01494 776 NtContinue (1244336, 0, ... 01495 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01496 776 NtContinue (1244336, 0, ... 01497 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01498 776 NtContinue (1244336, 0, ... 01499 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01500 776 NtContinue (1244336, 0, ... 01501 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01502 776 NtContinue (1244336, 0, ... 01503 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01504 776 NtContinue (1244336, 0, ... 01505 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01506 776 NtContinue (1244336, 0, ... 01507 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01508 776 NtContinue (1244336, 0, ... 01509 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01510 776 NtContinue (1244336, 0, ... 01511 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01512 776 NtContinue (1244336, 0, ... 01513 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01514 776 NtContinue (1244336, 0, ... 01515 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01516 776 NtContinue (1244336, 0, ... 01517 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01518 776 NtContinue (1244336, 0, ... 01519 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01520 776 NtContinue (1244336, 0, ... 01521 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01522 776 NtContinue (1244336, 0, ... 01523 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01524 776 NtContinue (1244336, 0, ... 01525 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01526 776 NtContinue (1244336, 0, ... 01527 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01528 776 NtContinue (1244336, 0, ... 01529 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01530 776 NtContinue (1244336, 0, ... 01531 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01532 776 NtContinue (1244336, 0, ... 01533 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01534 776 NtContinue (1244336, 0, ... 01535 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01536 776 NtContinue (1244336, 0, ... 01537 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01538 776 NtContinue (1244336, 0, ... 01539 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01540 776 NtContinue (1244336, 0, ... 01541 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01542 776 NtContinue (1244336, 0, ... 01543 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01544 776 NtContinue (1244336, 0, ... 01545 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01546 776 NtContinue (1244336, 0, ... 01547 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01548 776 NtContinue (1244336, 0, ... 01549 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01550 776 NtContinue (1244336, 0, ... 01551 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01552 776 NtContinue (1244336, 0, ... 01553 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01554 776 NtContinue (1244336, 0, ... 01555 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01556 776 NtContinue (1244336, 0, ... 01557 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01558 776 NtContinue (1244336, 0, ... 01559 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01560 776 NtContinue (1244336, 0, ... 01561 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01562 776 NtContinue (1244336, 0, ... 01563 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01564 776 NtContinue (1244336, 0, ... 01565 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01566 776 NtContinue (1244336, 0, ... 01567 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01568 776 NtContinue (1244336, 0, ... 01569 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01570 776 NtContinue (1244336, 0, ... 01571 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01572 776 NtContinue (1244336, 0, ... 01573 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01574 776 NtContinue (1244336, 0, ... 01575 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01576 776 NtContinue (1244336, 0, ... 01577 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01578 776 NtContinue (1244336, 0, ... 01579 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01580 776 NtContinue (1244336, 0, ... 01581 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01582 776 NtContinue (1244336, 0, ... 01583 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01584 776 NtContinue (1244336, 0, ... 01585 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01586 776 NtContinue (1244336, 0, ... 01587 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01588 776 NtContinue (1244336, 0, ... 01589 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01590 776 NtContinue (1244336, 0, ... 01591 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01592 776 NtContinue (1244336, 0, ... 01593 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01594 776 NtContinue (1244336, 0, ... 01595 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01596 776 NtContinue (1244336, 0, ... 01597 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01598 776 NtContinue (1244336, 0, ... 01599 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01600 776 NtContinue (1244336, 0, ... 01601 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01602 776 NtContinue (1244336, 0, ... 01603 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01604 776 NtContinue (1244336, 0, ... 01605 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01606 776 NtContinue (1244336, 0, ... 01607 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01608 776 NtContinue (1244336, 0, ... 01609 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01610 776 NtContinue (1244336, 0, ... 01611 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01612 776 NtContinue (1244336, 0, ... 01613 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01614 776 NtContinue (1244336, 0, ... 01615 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01616 776 NtContinue (1244336, 0, ... 01617 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01618 776 NtContinue (1244336, 0, ... 01619 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01620 776 NtContinue (1244336, 0, ... 01621 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01622 776 NtContinue (1244336, 0, ... 01623 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01624 776 NtContinue (1244336, 0, ... 01625 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01626 776 NtContinue (1244336, 0, ... 01627 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01628 776 NtContinue (1244336, 0, ... 01629 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01630 776 NtContinue (1244336, 0, ... 01631 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01632 776 NtContinue (1244336, 0, ... 01633 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01634 776 NtContinue (1244336, 0, ... 01635 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01636 776 NtContinue (1244336, 0, ... 01637 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01638 776 NtContinue (1244336, 0, ... 01639 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01640 776 NtContinue (1244336, 0, ... 01641 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01642 776 NtContinue (1244336, 0, ... 01643 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01644 776 NtContinue (1244336, 0, ... 01645 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01646 776 NtContinue (1244336, 0, ... 01647 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01648 776 NtContinue (1244336, 0, ... 01649 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01650 776 NtContinue (1244336, 0, ... 01651 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01652 776 NtContinue (1244336, 0, ... 01653 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01654 776 NtContinue (1244336, 0, ... 01655 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01656 776 NtContinue (1244336, 0, ... 01657 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01658 776 NtContinue (1244336, 0, ... 01659 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01660 776 NtContinue (1244336, 0, ... 01661 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01662 776 NtContinue (1244336, 0, ... 01663 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01664 776 NtContinue (1244336, 0, ... 01665 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01666 776 NtContinue (1244336, 0, ... 01667 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01668 776 NtContinue (1244336, 0, ... 01669 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01670 776 NtContinue (1244336, 0, ... 01671 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01672 776 NtContinue (1244336, 0, ... 01673 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01674 776 NtContinue (1244336, 0, ... 01675 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01676 776 NtContinue (1244336, 0, ... 01677 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01678 776 NtContinue (1244336, 0, ... 01679 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01680 776 NtContinue (1244336, 0, ... 01681 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01682 776 NtContinue (1244336, 0, ... 01683 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01684 776 NtContinue (1244336, 0, ... 01685 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01686 776 NtContinue (1244336, 0, ... 01687 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01688 776 NtContinue (1244336, 0, ... 01689 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01690 776 NtContinue (1244336, 0, ... 01691 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01692 776 NtContinue (1244336, 0, ... 01693 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01694 776 NtContinue (1244336, 0, ... 01695 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01696 776 NtContinue (1244336, 0, ... 01697 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01698 776 NtContinue (1244336, 0, ... 01699 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01700 776 NtContinue (1244336, 0, ... 01701 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01702 776 NtContinue (1244336, 0, ... 01703 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01704 776 NtContinue (1244336, 0, ... 01705 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01706 776 NtContinue (1244336, 0, ... 01707 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01708 776 NtContinue (1244336, 0, ... 01709 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01710 776 NtContinue (1244336, 0, ... 01711 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01712 776 NtContinue (1244336, 0, ... 01713 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01714 776 NtContinue (1244336, 0, ... 01715 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01716 776 NtContinue (1244336, 0, ... 01717 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01718 776 NtContinue (1244336, 0, ... 01719 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01720 776 NtContinue (1244336, 0, ... 01721 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01722 776 NtContinue (1244336, 0, ... 01723 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01724 776 NtContinue (1244336, 0, ... 01725 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01726 776 NtContinue (1244336, 0, ... 01727 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01728 776 NtContinue (1244336, 0, ... 01729 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01730 776 NtContinue (1244336, 0, ... 01731 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01732 776 NtContinue (1244336, 0, ... 01733 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01734 776 NtContinue (1244336, 0, ... 01735 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01736 776 NtContinue (1244336, 0, ... 01737 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01738 776 NtContinue (1244336, 0, ... 01739 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01740 776 NtContinue (1244336, 0, ... 01741 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01742 776 NtContinue (1244336, 0, ... 01743 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01744 776 NtContinue (1244336, 0, ... 01745 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01746 776 NtContinue (1244336, 0, ... 01747 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01748 776 NtContinue (1244336, 0, ... 01749 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01750 776 NtContinue (1244336, 0, ... 01751 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01752 776 NtContinue (1244336, 0, ... 01753 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01754 776 NtContinue (1244336, 0, ... 01755 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01756 776 NtContinue (1244336, 0, ... 01757 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01758 776 NtContinue (1244336, 0, ... 01759 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01760 776 NtContinue (1244336, 0, ... 01761 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01762 776 NtContinue (1244336, 0, ... 01763 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01764 776 NtContinue (1244336, 0, ... 01765 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01766 776 NtContinue (1244336, 0, ... 01767 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01768 776 NtContinue (1244336, 0, ... 01769 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01770 776 NtContinue (1244336, 0, ... 01771 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01772 776 NtContinue (1244336, 0, ... 01773 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01774 776 NtContinue (1244336, 0, ... 01775 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01776 776 NtContinue (1244336, 0, ... 01777 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01778 776 NtContinue (1244336, 0, ... 01779 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01780 776 NtContinue (1244336, 0, ... 01781 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01782 776 NtContinue (1244336, 0, ... 01783 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01784 776 NtContinue (1244336, 0, ... 01785 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01786 776 NtContinue (1244336, 0, ... 01787 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01788 776 NtContinue (1244336, 0, ... 01789 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01790 776 NtContinue (1244336, 0, ... 01791 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01792 776 NtContinue (1244336, 0, ... 01793 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01794 776 NtContinue (1244336, 0, ... 01795 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01796 776 NtContinue (1244336, 0, ... 01797 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01798 776 NtContinue (1244336, 0, ... 01799 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01800 776 NtContinue (1244336, 0, ... 01801 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01802 776 NtContinue (1244336, 0, ... 01803 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01804 776 NtContinue (1244336, 0, ... 01805 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01806 776 NtContinue (1244336, 0, ... 01807 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01808 776 NtContinue (1244336, 0, ... 01809 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01810 776 NtContinue (1244336, 0, ... 01811 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01812 776 NtContinue (1244336, 0, ... 01813 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01814 776 NtContinue (1244336, 0, ... 01815 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01816 776 NtContinue (1244336, 0, ... 01817 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01818 776 NtContinue (1244336, 0, ... 01819 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01820 776 NtContinue (1244336, 0, ... 01821 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01822 776 NtContinue (1244336, 0, ... 01823 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01824 776 NtContinue (1244336, 0, ... 01825 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01826 776 NtContinue (1244336, 0, ... 01827 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01828 776 NtContinue (1244336, 0, ... 01829 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01830 776 NtContinue (1244336, 0, ... 01831 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01832 776 NtContinue (1244336, 0, ... 01833 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01834 776 NtContinue (1244336, 0, ... 01835 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01836 776 NtContinue (1244336, 0, ... 01837 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01838 776 NtContinue (1244336, 0, ... 01839 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01840 776 NtContinue (1244336, 0, ... 01841 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01842 776 NtContinue (1244336, 0, ... 01843 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01844 776 NtContinue (1244336, 0, ... 01845 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01846 776 NtContinue (1244336, 0, ... 01847 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01848 776 NtContinue (1244336, 0, ... 01849 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01850 776 NtContinue (1244336, 0, ... 01851 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01852 776 NtContinue (1244336, 0, ... 01853 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01854 776 NtContinue (1244336, 0, ... 01855 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01856 776 NtContinue (1244336, 0, ... 01857 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01858 776 NtContinue (1244336, 0, ... 01859 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01860 776 NtContinue (1244336, 0, ... 01861 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01862 776 NtContinue (1244336, 0, ... 01863 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01864 776 NtContinue (1244336, 0, ... 01865 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01866 776 NtContinue (1244336, 0, ... 01867 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01868 776 NtContinue (1244336, 0, ... 01869 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01870 776 NtContinue (1244336, 0, ... 01871 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01872 776 NtContinue (1244336, 0, ... 01873 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01874 776 NtContinue (1244336, 0, ... 01875 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01876 776 NtContinue (1244336, 0, ... 01877 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01878 776 NtContinue (1244336, 0, ... 01879 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01880 776 NtContinue (1244336, 0, ... 01881 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01882 776 NtContinue (1244336, 0, ... 01883 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01884 776 NtContinue (1244336, 0, ... 01885 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01886 776 NtContinue (1244336, 0, ... 01887 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01888 776 NtContinue (1244336, 0, ... 01889 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01890 776 NtContinue (1244336, 0, ... 01891 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01892 776 NtContinue (1244336, 0, ... 01893 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01894 776 NtContinue (1244336, 0, ... 01895 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01896 776 NtContinue (1244336, 0, ... 01897 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01898 776 NtContinue (1244336, 0, ... 01899 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01900 776 NtContinue (1244336, 0, ... 01901 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01902 776 NtContinue (1244336, 0, ... 01903 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01904 776 NtContinue (1244336, 0, ... 01905 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01906 776 NtContinue (1244336, 0, ... 01907 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01908 776 NtContinue (1244336, 0, ... 01909 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01910 776 NtContinue (1244336, 0, ... 01911 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01912 776 NtContinue (1244336, 0, ... 01913 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01914 776 NtContinue (1244336, 0, ... 01915 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01916 776 NtContinue (1244336, 0, ... 01917 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01918 776 NtContinue (1244336, 0, ... 01919 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01920 776 NtContinue (1244336, 0, ... 01921 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01922 776 NtContinue (1244336, 0, ... 01923 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01924 776 NtContinue (1244336, 0, ... 01925 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01926 776 NtContinue (1244336, 0, ... 01927 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01928 776 NtContinue (1244336, 0, ... 01929 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01930 776 NtContinue (1244336, 0, ... 01931 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01932 776 NtContinue (1244336, 0, ... 01933 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01934 776 NtContinue (1244336, 0, ... 01935 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01936 776 NtContinue (1244336, 0, ... 01937 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01938 776 NtContinue (1244336, 0, ... 01939 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01940 776 NtContinue (1244336, 0, ... 01941 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01942 776 NtContinue (1244336, 0, ... 01943 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01944 776 NtContinue (1244336, 0, ... 01945 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01946 776 NtContinue (1244336, 0, ... 01947 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01948 776 NtContinue (1244336, 0, ... 01949 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01950 776 NtContinue (1244336, 0, ... 01951 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01952 776 NtContinue (1244336, 0, ... 01953 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01954 776 NtContinue (1244336, 0, ... 01955 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01956 776 NtContinue (1244336, 0, ... 01957 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01958 776 NtContinue (1244336, 0, ... 01959 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01960 776 NtContinue (1244336, 0, ... 01961 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01962 776 NtContinue (1244336, 0, ... 01963 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01964 776 NtContinue (1244336, 0, ... 01965 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01966 776 NtContinue (1244336, 0, ... 01967 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01968 776 NtContinue (1244336, 0, ... 01969 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01970 776 NtContinue (1244336, 0, ... 01971 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01972 776 NtContinue (1244336, 0, ... 01973 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01974 776 NtContinue (1244336, 0, ... 01975 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01976 776 NtContinue (1244336, 0, ... 01977 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01978 776 NtContinue (1244336, 0, ... 01979 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01980 776 NtContinue (1244336, 0, ... 01981 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01982 776 NtContinue (1244336, 0, ... 01983 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01984 776 NtContinue (1244336, 0, ... 01985 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01986 776 NtContinue (1244336, 0, ... 01987 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01988 776 NtContinue (1244336, 0, ... 01989 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01990 776 NtContinue (1244336, 0, ... 01991 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01992 776 NtContinue (1244336, 0, ... 01993 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01994 776 NtContinue (1244336, 0, ... 01995 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01996 776 NtContinue (1244336, 0, ... 01997 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01998 776 NtContinue (1244336, 0, ... 01999 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02000 776 NtContinue (1244336, 0, ... 02001 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02002 776 NtContinue (1244336, 0, ... 02003 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02004 776 NtContinue (1244336, 0, ... 02005 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02006 776 NtContinue (1244336, 0, ... 02007 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02008 776 NtContinue (1244336, 0, ... 02009 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02010 776 NtContinue (1244336, 0, ... 02011 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02012 776 NtContinue (1244336, 0, ... 02013 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02014 776 NtContinue (1244336, 0, ... 02015 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02016 776 NtContinue (1244336, 0, ... 02017 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02018 776 NtContinue (1244336, 0, ... 02019 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02020 776 NtContinue (1244336, 0, ... 02021 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02022 776 NtContinue (1244336, 0, ... 02023 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02024 776 NtContinue (1244336, 0, ... 02025 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02026 776 NtContinue (1244336, 0, ... 02027 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02028 776 NtContinue (1244336, 0, ... 02029 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02030 776 NtContinue (1244336, 0, ... 02031 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02032 776 NtContinue (1244336, 0, ... 02033 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02034 776 NtContinue (1244336, 0, ... 02035 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02036 776 NtContinue (1244336, 0, ... 02037 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02038 776 NtContinue (1244336, 0, ... 02039 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02040 776 NtContinue (1244336, 0, ... 02041 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02042 776 NtContinue (1244336, 0, ... 02043 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02044 776 NtContinue (1244336, 0, ... 02045 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02046 776 NtContinue (1244336, 0, ... 02047 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02048 776 NtContinue (1244336, 0, ... 02049 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02050 776 NtContinue (1244336, 0, ... 02051 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02052 776 NtContinue (1244336, 0, ... 02053 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02054 776 NtContinue (1244336, 0, ... 02055 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02056 776 NtContinue (1244336, 0, ... 02057 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02058 776 NtContinue (1244336, 0, ... 02059 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02060 776 NtContinue (1244336, 0, ... 02061 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02062 776 NtContinue (1244336, 0, ... 02063 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02064 776 NtContinue (1244336, 0, ... 02065 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02066 776 NtContinue (1244336, 0, ... 02067 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02068 776 NtContinue (1244336, 0, ... 02069 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02070 776 NtContinue (1244336, 0, ... 02071 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02072 776 NtContinue (1244336, 0, ... 02073 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02074 776 NtContinue (1244336, 0, ... 02075 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02076 776 NtContinue (1244336, 0, ... 02077 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02078 776 NtContinue (1244336, 0, ... 02079 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02080 776 NtContinue (1244336, 0, ... 02081 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02082 776 NtContinue (1244336, 0, ... 02083 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02084 776 NtContinue (1244336, 0, ... 02085 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02086 776 NtContinue (1244336, 0, ... 02087 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02088 776 NtContinue (1244336, 0, ... 02089 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02090 776 NtContinue (1244336, 0, ... 02091 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02092 776 NtContinue (1244336, 0, ... 02093 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02094 776 NtContinue (1244336, 0, ... 02095 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02096 776 NtContinue (1244336, 0, ... 02097 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02098 776 NtContinue (1244336, 0, ... 02099 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02100 776 NtContinue (1244336, 0, ... 02101 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02102 776 NtContinue (1244336, 0, ... 02103 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02104 776 NtContinue (1244336, 0, ... 02105 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02106 776 NtContinue (1244336, 0, ... 02107 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02108 776 NtContinue (1244336, 0, ... 02109 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02110 776 NtContinue (1244336, 0, ... 02111 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02112 776 NtContinue (1244336, 0, ... 02113 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02114 776 NtContinue (1244336, 0, ... 02115 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02116 776 NtContinue (1244336, 0, ... 02117 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02118 776 NtContinue (1244336, 0, ... 02119 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02120 776 NtContinue (1244336, 0, ... 02121 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02122 776 NtContinue (1244336, 0, ... 02123 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02124 776 NtContinue (1244336, 0, ... 02125 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02126 776 NtContinue (1244336, 0, ... 02127 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02128 776 NtContinue (1244336, 0, ... 02129 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02130 776 NtContinue (1244336, 0, ... 02131 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02132 776 NtContinue (1244336, 0, ... 02133 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02134 776 NtContinue (1244336, 0, ... 02135 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02136 776 NtContinue (1244336, 0, ... 02137 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02138 776 NtContinue (1244336, 0, ... 02139 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02140 776 NtContinue (1244336, 0, ... 02141 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02142 776 NtContinue (1244336, 0, ... 02143 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02144 776 NtContinue (1244336, 0, ... 02145 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02146 776 NtContinue (1244336, 0, ... 02147 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02148 776 NtContinue (1244336, 0, ... 02149 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02150 776 NtContinue (1244336, 0, ... 02151 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02152 776 NtContinue (1244336, 0, ... 02153 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02154 776 NtContinue (1244336, 0, ... 02155 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02156 776 NtContinue (1244336, 0, ... 02157 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02158 776 NtContinue (1244336, 0, ... 02159 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02160 776 NtContinue (1244336, 0, ... 02161 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02162 776 NtContinue (1244336, 0, ... 02163 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02164 776 NtContinue (1244336, 0, ... 02165 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02166 776 NtContinue (1244336, 0, ... 02167 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02168 776 NtContinue (1244336, 0, ... 02169 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02170 776 NtContinue (1244336, 0, ... 02171 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02172 776 NtContinue (1244336, 0, ... 02173 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02174 776 NtContinue (1244336, 0, ... 02175 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02176 776 NtContinue (1244336, 0, ... 02177 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02178 776 NtContinue (1244336, 0, ... 02179 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02180 776 NtContinue (1244336, 0, ... 02181 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02182 776 NtContinue (1244336, 0, ... 02183 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02184 776 NtContinue (1244336, 0, ... 02185 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02186 776 NtContinue (1244336, 0, ... 02187 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02188 776 NtContinue (1244336, 0, ... 02189 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02190 776 NtContinue (1244336, 0, ... 02191 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02192 776 NtContinue (1244336, 0, ... 02193 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02194 776 NtContinue (1244336, 0, ... 02195 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02196 776 NtContinue (1244336, 0, ... 02197 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02198 776 NtContinue (1244336, 0, ... 02199 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02200 776 NtContinue (1244336, 0, ... 02201 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02202 776 NtContinue (1244336, 0, ... 02203 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02204 776 NtContinue (1244336, 0, ... 02205 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02206 776 NtContinue (1244336, 0, ... 02207 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02208 776 NtContinue (1244336, 0, ... 02209 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02210 776 NtContinue (1244336, 0, ... 02211 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02212 776 NtContinue (1244336, 0, ... 02213 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02214 776 NtContinue (1244336, 0, ... 02215 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02216 776 NtContinue (1244336, 0, ... 02217 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02218 776 NtContinue (1244336, 0, ... 02219 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02220 776 NtContinue (1244336, 0, ... 02221 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02222 776 NtContinue (1244336, 0, ... 02223 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02224 776 NtContinue (1244336, 0, ... 02225 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02226 776 NtContinue (1244336, 0, ... 02227 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02228 776 NtContinue (1244336, 0, ... 02229 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02230 776 NtContinue (1244336, 0, ... 02231 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02232 776 NtContinue (1244336, 0, ... 02233 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02234 776 NtContinue (1244336, 0, ... 02235 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02236 776 NtContinue (1244336, 0, ... 02237 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02238 776 NtContinue (1244336, 0, ... 02239 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02240 776 NtContinue (1244336, 0, ... 02241 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02242 776 NtContinue (1244336, 0, ... 02243 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02244 776 NtContinue (1244336, 0, ... 02245 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02246 776 NtContinue (1244336, 0, ... 02247 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02248 776 NtContinue (1244336, 0, ... 02249 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02250 776 NtContinue (1244336, 0, ... 02251 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02252 776 NtContinue (1244336, 0, ... 02253 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02254 776 NtContinue (1244336, 0, ... 02255 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02256 776 NtContinue (1244336, 0, ... 02257 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02258 776 NtContinue (1244336, 0, ... 02259 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02260 776 NtContinue (1244336, 0, ... 02261 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02262 776 NtContinue (1244336, 0, ... 02263 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02264 776 NtContinue (1244336, 0, ... 02265 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02266 776 NtContinue (1244336, 0, ... 02267 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02268 776 NtContinue (1244336, 0, ... 02269 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02270 776 NtContinue (1244336, 0, ... 02271 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02272 776 NtContinue (1244336, 0, ... 02273 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02274 776 NtContinue (1244336, 0, ... 02275 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02276 776 NtContinue (1244336, 0, ... 02277 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02278 776 NtContinue (1244336, 0, ... 02279 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02280 776 NtContinue (1244336, 0, ... 02281 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02282 776 NtContinue (1244336, 0, ... 02283 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02284 776 NtContinue (1244336, 0, ... 02285 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02286 776 NtContinue (1244336, 0, ... 02287 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02288 776 NtContinue (1244336, 0, ... 02289 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02290 776 NtContinue (1244336, 0, ... 02291 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02292 776 NtContinue (1244336, 0, ... 02293 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02294 776 NtContinue (1244336, 0, ... 02295 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02296 776 NtContinue (1244336, 0, ... 02297 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02298 776 NtContinue (1244336, 0, ... 02299 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02300 776 NtContinue (1244336, 0, ... 02301 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02302 776 NtContinue (1244336, 0, ... 02303 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02304 776 NtContinue (1244336, 0, ... 02305 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02306 776 NtContinue (1244336, 0, ... 02307 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02308 776 NtContinue (1244336, 0, ... 02309 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02310 776 NtContinue (1244336, 0, ... 02311 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02312 776 NtContinue (1244336, 0, ... 02313 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02314 776 NtContinue (1244336, 0, ... 02315 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02316 776 NtContinue (1244336, 0, ... 02317 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02318 776 NtContinue (1244336, 0, ... 02319 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02320 776 NtContinue (1244336, 0, ... 02321 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02322 776 NtContinue (1244336, 0, ... 02323 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02324 776 NtContinue (1244336, 0, ... 02325 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02326 776 NtContinue (1244336, 0, ... 02327 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02328 776 NtContinue (1244336, 0, ... 02329 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02330 776 NtContinue (1244336, 0, ... 02331 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02332 776 NtContinue (1244336, 0, ... 02333 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02334 776 NtContinue (1244336, 0, ... 02335 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02336 776 NtContinue (1244336, 0, ... 02337 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02338 776 NtContinue (1244336, 0, ... 02339 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02340 776 NtContinue (1244336, 0, ... 02341 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02342 776 NtContinue (1244336, 0, ... 02343 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02344 776 NtContinue (1244336, 0, ... 02345 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02346 776 NtContinue (1244336, 0, ... 02347 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02348 776 NtContinue (1244336, 0, ... 02349 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02350 776 NtContinue (1244336, 0, ... 02351 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02352 776 NtContinue (1244336, 0, ... 02353 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02354 776 NtContinue (1244336, 0, ... 02355 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02356 776 NtContinue (1244336, 0, ... 02357 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02358 776 NtContinue (1244336, 0, ... 02359 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02360 776 NtContinue (1244336, 0, ... 02361 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02362 776 NtContinue (1244336, 0, ... 02363 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02364 776 NtContinue (1244336, 0, ... 02365 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02366 776 NtContinue (1244336, 0, ... 02367 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02368 776 NtContinue (1244336, 0, ... 02369 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02370 776 NtContinue (1244336, 0, ... 02371 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02372 776 NtContinue (1244336, 0, ... 02373 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02374 776 NtContinue (1244336, 0, ... 02375 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02376 776 NtContinue (1244336, 0, ... 02377 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02378 776 NtContinue (1244336, 0, ... 02379 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02380 776 NtContinue (1244336, 0, ... 02381 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02382 776 NtContinue (1244336, 0, ... 02383 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02384 776 NtContinue (1244336, 0, ... 02385 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02386 776 NtContinue (1244336, 0, ... 02387 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02388 776 NtContinue (1244336, 0, ... 02389 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02390 776 NtContinue (1244336, 0, ... 02391 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02392 776 NtContinue (1244336, 0, ... 02393 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02394 776 NtContinue (1244336, 0, ... 02395 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02396 776 NtContinue (1244336, 0, ... 02397 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02398 776 NtContinue (1244336, 0, ... 02399 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02400 776 NtContinue (1244336, 0, ... 02401 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02402 776 NtContinue (1244336, 0, ... 02403 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02404 776 NtContinue (1244336, 0, ... 02405 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02406 776 NtContinue (1244336, 0, ... 02407 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02408 776 NtContinue (1244336, 0, ... 02409 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02410 776 NtContinue (1244336, 0, ... 02411 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02412 776 NtContinue (1244336, 0, ... 02413 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02414 776 NtContinue (1244336, 0, ... 02415 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02416 776 NtContinue (1244336, 0, ... 02417 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02418 776 NtContinue (1244336, 0, ... 02419 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02420 776 NtContinue (1244336, 0, ... 02421 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02422 776 NtContinue (1244336, 0, ... 02423 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02424 776 NtContinue (1244336, 0, ... 02425 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02426 776 NtContinue (1244336, 0, ... 02427 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02428 776 NtContinue (1244336, 0, ... 02429 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02430 776 NtContinue (1244336, 0, ... 02431 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02432 776 NtContinue (1244336, 0, ... 02433 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02434 776 NtContinue (1244336, 0, ... 02435 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02436 776 NtContinue (1244336, 0, ... 02437 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02438 776 NtContinue (1244336, 0, ... 02439 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02440 776 NtContinue (1244336, 0, ... 02441 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02442 776 NtContinue (1244336, 0, ... 02443 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02444 776 NtContinue (1244336, 0, ... 02445 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02446 776 NtContinue (1244336, 0, ... 02447 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02448 776 NtContinue (1244336, 0, ... 02449 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02450 776 NtContinue (1244336, 0, ... 02451 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02452 776 NtContinue (1244336, 0, ... 02453 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02454 776 NtContinue (1244336, 0, ... 02455 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02456 776 NtContinue (1244336, 0, ... 02457 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02458 776 NtContinue (1244336, 0, ... 02459 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02460 776 NtContinue (1244336, 0, ... 02461 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02462 776 NtContinue (1244336, 0, ... 02463 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02464 776 NtContinue (1244336, 0, ... 02465 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02466 776 NtContinue (1244336, 0, ... 02467 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02468 776 NtContinue (1244336, 0, ... 02469 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02470 776 NtContinue (1244336, 0, ... 02471 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02472 776 NtContinue (1244336, 0, ... 02473 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02474 776 NtContinue (1244336, 0, ... 02475 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02476 776 NtContinue (1244336, 0, ... 02477 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02478 776 NtContinue (1244336, 0, ... 02479 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02480 776 NtContinue (1244336, 0, ... 02481 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02482 776 NtContinue (1244336, 0, ... 02483 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02484 776 NtContinue (1244336, 0, ... 02485 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02486 776 NtContinue (1244336, 0, ... 02487 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02488 776 NtContinue (1244336, 0, ... 02489 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02490 776 NtContinue (1244336, 0, ... 02491 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02492 776 NtContinue (1244336, 0, ... 02493 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02494 776 NtContinue (1244336, 0, ... 02495 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02496 776 NtContinue (1244336, 0, ... 02497 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02498 776 NtContinue (1244336, 0, ... 02499 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02500 776 NtContinue (1244336, 0, ... 02501 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02502 776 NtContinue (1244336, 0, ... 02503 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02504 776 NtContinue (1244336, 0, ... 02505 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02506 776 NtContinue (1244336, 0, ... 02507 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02508 776 NtContinue (1244336, 0, ... 02509 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02510 776 NtContinue (1244336, 0, ... 02511 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02512 776 NtContinue (1244336, 0, ... 02513 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02514 776 NtContinue (1244336, 0, ... 02515 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02516 776 NtContinue (1244336, 0, ... 02517 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02518 776 NtContinue (1244336, 0, ... 02519 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02520 776 NtContinue (1244336, 0, ... 02521 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02522 776 NtContinue (1244336, 0, ... 02523 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02524 776 NtContinue (1244336, 0, ... 02525 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02526 776 NtContinue (1244336, 0, ... 02527 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02528 776 NtContinue (1244336, 0, ... 02529 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02530 776 NtContinue (1244336, 0, ... 02531 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02532 776 NtContinue (1244336, 0, ... 02533 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02534 776 NtContinue (1244336, 0, ... 02535 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02536 776 NtContinue (1244336, 0, ... 02537 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02538 776 NtContinue (1244336, 0, ... 02539 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02540 776 NtContinue (1244336, 0, ... 02541 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02542 776 NtContinue (1244336, 0, ... 02543 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02544 776 NtContinue (1244336, 0, ... 02545 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02546 776 NtContinue (1244336, 0, ... 02547 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02548 776 NtContinue (1244336, 0, ... 02549 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02550 776 NtContinue (1244336, 0, ... 02551 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02552 776 NtContinue (1244336, 0, ... 02553 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02554 776 NtContinue (1244336, 0, ... 02555 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02556 776 NtContinue (1244336, 0, ... 02557 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02558 776 NtContinue (1244336, 0, ... 02559 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02560 776 NtContinue (1244336, 0, ... 02561 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02562 776 NtContinue (1244336, 0, ... 02563 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02564 776 NtContinue (1244336, 0, ... 02565 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02566 776 NtContinue (1244336, 0, ... 02567 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02568 776 NtContinue (1244336, 0, ... 02569 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02570 776 NtContinue (1244336, 0, ... 02571 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02572 776 NtContinue (1244336, 0, ... 02573 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02574 776 NtContinue (1244336, 0, ... 02575 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02576 776 NtContinue (1244336, 0, ... 02577 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02578 776 NtContinue (1244336, 0, ... 02579 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02580 776 NtContinue (1244336, 0, ... 02581 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02582 776 NtContinue (1244336, 0, ... 02583 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02584 776 NtContinue (1244336, 0, ... 02585 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02586 776 NtContinue (1244336, 0, ... 02587 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02588 776 NtContinue (1244336, 0, ... 02589 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02590 776 NtContinue (1244336, 0, ... 02591 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02592 776 NtContinue (1244336, 0, ... 02593 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02594 776 NtContinue (1244336, 0, ... 02595 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02596 776 NtContinue (1244336, 0, ... 02597 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02598 776 NtContinue (1244336, 0, ... 02599 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02600 776 NtContinue (1244336, 0, ... 02601 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02602 776 NtContinue (1244336, 0, ... 02603 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02604 776 NtContinue (1244336, 0, ... 02605 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02606 776 NtContinue (1244336, 0, ... 02607 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02608 776 NtContinue (1244336, 0, ... 02609 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02610 776 NtContinue (1244336, 0, ... 02611 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02612 776 NtContinue (1244336, 0, ... 02613 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02614 776 NtContinue (1244336, 0, ... 02615 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02616 776 NtContinue (1244336, 0, ... 02617 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02618 776 NtContinue (1244336, 0, ... 02619 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02620 776 NtContinue (1244336, 0, ... 02621 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02622 776 NtContinue (1244336, 0, ... 02623 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02624 776 NtContinue (1244336, 0, ... 02625 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02626 776 NtContinue (1244336, 0, ... 02627 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02628 776 NtContinue (1244336, 0, ... 02629 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02630 776 NtContinue (1244336, 0, ... 02631 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02632 776 NtContinue (1244336, 0, ... 02633 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02634 776 NtContinue (1244336, 0, ... 02635 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02636 776 NtContinue (1244336, 0, ... 02637 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02638 776 NtContinue (1244336, 0, ... 02639 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02640 776 NtContinue (1244336, 0, ... 02641 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02642 776 NtContinue (1244336, 0, ... 02643 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02644 776 NtContinue (1244336, 0, ... 02645 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02646 776 NtContinue (1244336, 0, ... 02647 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02648 776 NtContinue (1244336, 0, ... 02649 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02650 776 NtContinue (1244336, 0, ... 02651 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02652 776 NtContinue (1244336, 0, ... 02653 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02654 776 NtContinue (1244336, 0, ... 02655 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02656 776 NtContinue (1244336, 0, ... 02657 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02658 776 NtContinue (1244336, 0, ... 02659 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02660 776 NtContinue (1244336, 0, ... 02661 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02662 776 NtContinue (1244336, 0, ... 02663 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02664 776 NtContinue (1244336, 0, ... 02665 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02666 776 NtContinue (1244336, 0, ... 02667 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02668 776 NtContinue (1244336, 0, ... 02669 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02670 776 NtContinue (1244336, 0, ... 02671 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02672 776 NtContinue (1244336, 0, ... 02673 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02674 776 NtContinue (1244336, 0, ... 02675 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02676 776 NtContinue (1244336, 0, ... 02677 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02678 776 NtContinue (1244336, 0, ... 02679 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02680 776 NtContinue (1244336, 0, ... 02681 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02682 776 NtContinue (1244336, 0, ... 02683 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02684 776 NtContinue (1244336, 0, ... 02685 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02686 776 NtContinue (1244336, 0, ... 02687 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02688 776 NtContinue (1244336, 0, ... 02689 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02690 776 NtContinue (1244336, 0, ... 02691 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02692 776 NtContinue (1244336, 0, ... 02693 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02694 776 NtContinue (1244336, 0, ... 02695 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02696 776 NtContinue (1244336, 0, ... 02697 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02698 776 NtContinue (1244336, 0, ... 02699 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02700 776 NtContinue (1244336, 0, ... 02701 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02702 776 NtContinue (1244336, 0, ... 02703 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02704 776 NtContinue (1244336, 0, ... 02705 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02706 776 NtContinue (1244336, 0, ... 02707 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02708 776 NtContinue (1244336, 0, ... 02709 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02710 776 NtContinue (1244336, 0, ... 02711 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02712 776 NtContinue (1244336, 0, ... 02713 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02714 776 NtContinue (1244336, 0, ... 02715 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02716 776 NtContinue (1244336, 0, ... 02717 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02718 776 NtContinue (1244336, 0, ... 02719 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02720 776 NtContinue (1244336, 0, ... 02721 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02722 776 NtContinue (1244336, 0, ... 02723 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02724 776 NtContinue (1244336, 0, ... 02725 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02726 776 NtContinue (1244336, 0, ... 02727 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02728 776 NtContinue (1244336, 0, ... 02729 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02730 776 NtContinue (1244336, 0, ... 02731 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02732 776 NtContinue (1244336, 0, ... 02733 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02734 776 NtContinue (1244336, 0, ... 02735 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02736 776 NtContinue (1244336, 0, ... 02737 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02738 776 NtContinue (1244336, 0, ... 02739 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02740 776 NtContinue (1244336, 0, ... 02741 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02742 776 NtContinue (1244336, 0, ... 02743 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02744 776 NtContinue (1244336, 0, ... 02745 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02746 776 NtContinue (1244336, 0, ... 02747 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02748 776 NtContinue (1244336, 0, ... 02749 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02750 776 NtContinue (1244336, 0, ... 02751 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02752 776 NtContinue (1244336, 0, ... 02753 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02754 776 NtContinue (1244336, 0, ... 02755 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02756 776 NtContinue (1244336, 0, ... 02757 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02758 776 NtContinue (1244336, 0, ... 02759 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02760 776 NtContinue (1244336, 0, ... 02761 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02762 776 NtContinue (1244336, 0, ... 02763 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02764 776 NtContinue (1244336, 0, ... 02765 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02766 776 NtContinue (1244336, 0, ... 02767 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02768 776 NtContinue (1244336, 0, ... 02769 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02770 776 NtContinue (1244336, 0, ... 02771 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02772 776 NtContinue (1244336, 0, ... 02773 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02774 776 NtContinue (1244336, 0, ... 02775 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02776 776 NtContinue (1244336, 0, ... 02777 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02778 776 NtContinue (1244336, 0, ... 02779 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02780 776 NtContinue (1244336, 0, ... 02781 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02782 776 NtContinue (1244336, 0, ... 02783 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02784 776 NtContinue (1244336, 0, ... 02785 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02786 776 NtContinue (1244336, 0, ... 02787 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02788 776 NtContinue (1244336, 0, ... 02789 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02790 776 NtContinue (1244336, 0, ... 02791 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02792 776 NtContinue (1244336, 0, ... 02793 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02794 776 NtContinue (1244336, 0, ... 02795 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02796 776 NtContinue (1244336, 0, ... 02797 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02798 776 NtContinue (1244336, 0, ... 02799 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02800 776 NtContinue (1244336, 0, ... 02801 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02802 776 NtContinue (1244336, 0, ... 02803 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02804 776 NtContinue (1244336, 0, ... 02805 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02806 776 NtContinue (1244336, 0, ... 02807 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02808 776 NtContinue (1244336, 0, ... 02809 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02810 776 NtContinue (1244336, 0, ... 02811 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02812 776 NtContinue (1244336, 0, ... 02813 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02814 776 NtContinue (1244336, 0, ... 02815 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02816 776 NtContinue (1244336, 0, ... 02817 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02818 776 NtContinue (1244336, 0, ... 02819 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02820 776 NtContinue (1244336, 0, ... 02821 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02822 776 NtContinue (1244336, 0, ... 02823 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02824 776 NtContinue (1244336, 0, ... 02825 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02826 776 NtContinue (1244336, 0, ... 02827 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02828 776 NtContinue (1244336, 0, ... 02829 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02830 776 NtContinue (1244336, 0, ... 02831 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02832 776 NtContinue (1244336, 0, ... 02833 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02834 776 NtContinue (1244336, 0, ... 02835 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02836 776 NtContinue (1244336, 0, ... 02837 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02838 776 NtContinue (1244336, 0, ... 02839 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02840 776 NtContinue (1244336, 0, ... 02841 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02842 776 NtContinue (1244336, 0, ... 02843 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02844 776 NtContinue (1244336, 0, ... 02845 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02846 776 NtContinue (1244336, 0, ... 02847 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02848 776 NtContinue (1244336, 0, ... 02849 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02850 776 NtContinue (1244336, 0, ... 02851 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02852 776 NtContinue (1244336, 0, ... 02853 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02854 776 NtContinue (1244336, 0, ... 02855 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02856 776 NtContinue (1244336, 0, ... 02857 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02858 776 NtContinue (1244336, 0, ... 02859 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02860 776 NtContinue (1244336, 0, ... 02861 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02862 776 NtContinue (1244336, 0, ... 02863 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02864 776 NtContinue (1244336, 0, ... 02865 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02866 776 NtContinue (1244336, 0, ... 02867 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02868 776 NtContinue (1244336, 0, ... 02869 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02870 776 NtContinue (1244336, 0, ... 02871 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02872 776 NtContinue (1244336, 0, ... 02873 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02874 776 NtContinue (1244336, 0, ... 02875 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02876 776 NtContinue (1244336, 0, ... 02877 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02878 776 NtContinue (1244336, 0, ... 02879 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02880 776 NtContinue (1244336, 0, ... 02881 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02882 776 NtContinue (1244336, 0, ... 02883 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02884 776 NtContinue (1244336, 0, ... 02885 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02886 776 NtContinue (1244336, 0, ... 02887 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02888 776 NtContinue (1244336, 0, ... 02889 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02890 776 NtContinue (1244336, 0, ... 02891 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02892 776 NtContinue (1244336, 0, ... 02893 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02894 776 NtContinue (1244336, 0, ... 02895 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02896 776 NtContinue (1244336, 0, ... 02897 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02898 776 NtContinue (1244336, 0, ... 02899 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02900 776 NtContinue (1244336, 0, ... 02901 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02902 776 NtContinue (1244336, 0, ... 02903 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02904 776 NtContinue (1244336, 0, ... 02905 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02906 776 NtContinue (1244336, 0, ... 02907 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02908 776 NtContinue (1244336, 0, ... 02909 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02910 776 NtContinue (1244336, 0, ... 02911 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02912 776 NtContinue (1244336, 0, ... 02913 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02914 776 NtContinue (1244336, 0, ... 02915 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02916 776 NtContinue (1244336, 0, ... 02917 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02918 776 NtContinue (1244336, 0, ... 02919 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02920 776 NtContinue (1244336, 0, ... 02921 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02922 776 NtContinue (1244336, 0, ... 02923 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02924 776 NtContinue (1244336, 0, ... 02925 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02926 776 NtContinue (1244336, 0, ... 02927 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02928 776 NtContinue (1244336, 0, ... 02929 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02930 776 NtContinue (1244336, 0, ... 02931 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02932 776 NtContinue (1244336, 0, ... 02933 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02934 776 NtContinue (1244336, 0, ... 02935 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02936 776 NtContinue (1244336, 0, ... 02937 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02938 776 NtContinue (1244336, 0, ... 02939 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02940 776 NtContinue (1244336, 0, ... 02941 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02942 776 NtContinue (1244336, 0, ... 02943 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02944 776 NtContinue (1244336, 0, ... 02945 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02946 776 NtContinue (1244336, 0, ... 02947 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02948 776 NtContinue (1244336, 0, ... 02949 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02950 776 NtContinue (1244336, 0, ... 02951 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02952 776 NtContinue (1244336, 0, ... 02953 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02954 776 NtContinue (1244336, 0, ... 02955 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02956 776 NtContinue (1244336, 0, ... 02957 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02958 776 NtContinue (1244336, 0, ... 02959 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02960 776 NtContinue (1244336, 0, ... 02961 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02962 776 NtContinue (1244336, 0, ... 02963 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02964 776 NtContinue (1244336, 0, ... 02965 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02966 776 NtContinue (1244336, 0, ... 02967 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02968 776 NtContinue (1244336, 0, ... 02969 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02970 776 NtContinue (1244336, 0, ... 02971 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02972 776 NtContinue (1244336, 0, ... 02973 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02974 776 NtContinue (1244336, 0, ... 02975 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02976 776 NtContinue (1244336, 0, ... 02977 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02978 776 NtContinue (1244336, 0, ... 02979 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02980 776 NtContinue (1244336, 0, ... 02981 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02982 776 NtContinue (1244336, 0, ... 02983 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02984 776 NtContinue (1244336, 0, ... 02985 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02986 776 NtContinue (1244336, 0, ... 02987 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02988 776 NtContinue (1244336, 0, ... 02989 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02990 776 NtContinue (1244336, 0, ... 02991 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02992 776 NtContinue (1244336, 0, ... 02993 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02994 776 NtContinue (1244336, 0, ... 02995 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02996 776 NtContinue (1244336, 0, ... 02997 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02998 776 NtContinue (1244336, 0, ... 02999 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03000 776 NtContinue (1244336, 0, ... 03001 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03002 776 NtContinue (1244336, 0, ... 03003 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03004 776 NtContinue (1244336, 0, ... 03005 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03006 776 NtContinue (1244336, 0, ... 03007 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03008 776 NtContinue (1244336, 0, ... 03009 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03010 776 NtContinue (1244336, 0, ... 03011 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03012 776 NtContinue (1244336, 0, ... 03013 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03014 776 NtContinue (1244336, 0, ... 03015 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03016 776 NtContinue (1244336, 0, ... 03017 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03018 776 NtContinue (1244336, 0, ... 03019 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03020 776 NtContinue (1244336, 0, ... 03021 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03022 776 NtContinue (1244336, 0, ... 03023 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03024 776 NtContinue (1244336, 0, ... 03025 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03026 776 NtContinue (1244336, 0, ... 03027 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03028 776 NtContinue (1244336, 0, ... 03029 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03030 776 NtContinue (1244336, 0, ... 03031 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03032 776 NtContinue (1244336, 0, ... 03033 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03034 776 NtContinue (1244336, 0, ... 03035 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03036 776 NtContinue (1244336, 0, ... 03037 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03038 776 NtContinue (1244336, 0, ... 03039 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03040 776 NtContinue (1244336, 0, ... 03041 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03042 776 NtContinue (1244336, 0, ... 03043 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03044 776 NtContinue (1244336, 0, ... 03045 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03046 776 NtContinue (1244336, 0, ... 03047 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03048 776 NtContinue (1244336, 0, ... 03049 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03050 776 NtContinue (1244336, 0, ... 03051 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03052 776 NtContinue (1244336, 0, ... 03053 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03054 776 NtContinue (1244336, 0, ... 03055 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03056 776 NtContinue (1244336, 0, ... 03057 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03058 776 NtContinue (1244336, 0, ... 03059 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03060 776 NtContinue (1244336, 0, ... 03061 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03062 776 NtContinue (1244336, 0, ... 03063 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03064 776 NtContinue (1244336, 0, ... 03065 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03066 776 NtContinue (1244336, 0, ... 03067 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03068 776 NtContinue (1244336, 0, ... 03069 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03070 776 NtContinue (1244336, 0, ... 03071 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03072 776 NtContinue (1244336, 0, ... 03073 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03074 776 NtContinue (1244336, 0, ... 03075 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03076 776 NtContinue (1244336, 0, ... 03077 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03078 776 NtContinue (1244336, 0, ... 03079 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03080 776 NtContinue (1244336, 0, ... 03081 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03082 776 NtContinue (1244336, 0, ... 03083 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03084 776 NtContinue (1244336, 0, ... 03085 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03086 776 NtContinue (1244336, 0, ... 03087 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03088 776 NtContinue (1244336, 0, ... 03089 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03090 776 NtContinue (1244336, 0, ... 03091 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03092 776 NtContinue (1244336, 0, ... 03093 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03094 776 NtContinue (1244336, 0, ... 03095 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03096 776 NtContinue (1244336, 0, ... 03097 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03098 776 NtContinue (1244336, 0, ... 03099 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03100 776 NtContinue (1244336, 0, ... 03101 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03102 776 NtContinue (1244336, 0, ... 03103 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03104 776 NtContinue (1244336, 0, ... 03105 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03106 776 NtContinue (1244336, 0, ... 03107 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03108 776 NtContinue (1244336, 0, ... 03109 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03110 776 NtContinue (1244336, 0, ... 03111 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03112 776 NtContinue (1244336, 0, ... 03113 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03114 776 NtContinue (1244336, 0, ... 03115 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03116 776 NtContinue (1244336, 0, ... 03117 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03118 776 NtContinue (1244336, 0, ... 03119 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03120 776 NtContinue (1244336, 0, ... 03121 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03122 776 NtContinue (1244336, 0, ... 03123 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03124 776 NtContinue (1244336, 0, ... 03125 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03126 776 NtContinue (1244336, 0, ... 03127 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03128 776 NtContinue (1244336, 0, ... 03129 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03130 776 NtContinue (1244336, 0, ... 03131 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03132 776 NtContinue (1244336, 0, ... 03133 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03134 776 NtContinue (1244336, 0, ... 03135 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03136 776 NtContinue (1244336, 0, ... 03137 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03138 776 NtContinue (1244336, 0, ... 03139 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03140 776 NtContinue (1244336, 0, ... 03141 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03142 776 NtContinue (1244336, 0, ... 03143 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03144 776 NtContinue (1244336, 0, ... 03145 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03146 776 NtContinue (1244336, 0, ... 03147 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03148 776 NtContinue (1244336, 0, ... 03149 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03150 776 NtContinue (1244336, 0, ... 03151 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03152 776 NtContinue (1244336, 0, ... 03153 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03154 776 NtContinue (1244336, 0, ... 03155 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03156 776 NtContinue (1244336, 0, ... 03157 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03158 776 NtContinue (1244336, 0, ... 03159 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03160 776 NtContinue (1244336, 0, ... 03161 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03162 776 NtContinue (1244336, 0, ... 03163 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03164 776 NtContinue (1244336, 0, ... 03165 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03166 776 NtContinue (1244336, 0, ... 03167 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03168 776 NtContinue (1244336, 0, ... 03169 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03170 776 NtContinue (1244336, 0, ... 03171 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03172 776 NtContinue (1244336, 0, ... 03173 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03174 776 NtContinue (1244336, 0, ... 03175 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03176 776 NtContinue (1244336, 0, ... 03177 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03178 776 NtContinue (1244336, 0, ... 03179 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03180 776 NtContinue (1244336, 0, ... 03181 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03182 776 NtContinue (1244336, 0, ... 03183 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03184 776 NtContinue (1244336, 0, ... 03185 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03186 776 NtContinue (1244336, 0, ... 03187 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03188 776 NtContinue (1244336, 0, ... 03189 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03190 776 NtContinue (1244336, 0, ... 03191 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03192 776 NtContinue (1244336, 0, ... 03193 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03194 776 NtContinue (1244336, 0, ... 03195 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03196 776 NtContinue (1244336, 0, ... 03197 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03198 776 NtContinue (1244336, 0, ... 03199 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03200 776 NtContinue (1244336, 0, ... 03201 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03202 776 NtContinue (1244336, 0, ... 03203 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03204 776 NtContinue (1244336, 0, ... 03205 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03206 776 NtContinue (1244336, 0, ... 03207 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03208 776 NtContinue (1244336, 0, ... 03209 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03210 776 NtContinue (1244336, 0, ... 03211 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03212 776 NtContinue (1244336, 0, ... 03213 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03214 776 NtContinue (1244336, 0, ... 03215 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03216 776 NtContinue (1244336, 0, ... 03217 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03218 776 NtContinue (1244336, 0, ... 03219 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03220 776 NtContinue (1244336, 0, ... 03221 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03222 776 NtContinue (1244336, 0, ... 03223 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03224 776 NtContinue (1244336, 0, ... 03225 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03226 776 NtContinue (1244336, 0, ... 03227 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03228 776 NtContinue (1244336, 0, ... 03229 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03230 776 NtContinue (1244336, 0, ... 03231 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03232 776 NtContinue (1244336, 0, ... 03233 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03234 776 NtContinue (1244336, 0, ... 03235 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03236 776 NtContinue (1244336, 0, ... 03237 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03238 776 NtContinue (1244336, 0, ... 03239 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03240 776 NtContinue (1244336, 0, ... 03241 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03242 776 NtContinue (1244336, 0, ... 03243 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03244 776 NtContinue (1244336, 0, ... 03245 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03246 776 NtContinue (1244336, 0, ... 03247 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03248 776 NtContinue (1244336, 0, ... 03249 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03250 776 NtContinue (1244336, 0, ... 03251 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03252 776 NtContinue (1244336, 0, ... 03253 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03254 776 NtContinue (1244336, 0, ... 03255 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03256 776 NtContinue (1244336, 0, ... 03257 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03258 776 NtContinue (1244336, 0, ... 03259 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03260 776 NtContinue (1244336, 0, ... 03261 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03262 776 NtContinue (1244336, 0, ... 03263 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03264 776 NtContinue (1244336, 0, ... 03265 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03266 776 NtContinue (1244336, 0, ... 03267 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03268 776 NtContinue (1244336, 0, ... 03269 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03270 776 NtContinue (1244336, 0, ... 03271 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03272 776 NtContinue (1244336, 0, ... 03273 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03274 776 NtContinue (1244336, 0, ... 03275 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03276 776 NtContinue (1244336, 0, ... 03277 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03278 776 NtContinue (1244336, 0, ... 03279 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03280 776 NtContinue (1244336, 0, ... 03281 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03282 776 NtContinue (1244336, 0, ... 03283 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03284 776 NtContinue (1244336, 0, ... 03285 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03286 776 NtContinue (1244336, 0, ... 03287 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03288 776 NtContinue (1244336, 0, ... 03289 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03290 776 NtContinue (1244336, 0, ... 03291 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03292 776 NtContinue (1244336, 0, ... 03293 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03294 776 NtContinue (1244336, 0, ... 03295 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03296 776 NtContinue (1244336, 0, ... 03297 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03298 776 NtContinue (1244336, 0, ... 03299 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03300 776 NtContinue (1244336, 0, ... 03301 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03302 776 NtContinue (1244336, 0, ... 03303 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03304 776 NtContinue (1244336, 0, ... 03305 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03306 776 NtContinue (1244336, 0, ... 03307 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03308 776 NtContinue (1244336, 0, ... 03309 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03310 776 NtContinue (1244336, 0, ... 03311 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03312 776 NtContinue (1244336, 0, ... 03313 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03314 776 NtContinue (1244336, 0, ... 03315 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03316 776 NtContinue (1244336, 0, ... 03317 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03318 776 NtContinue (1244336, 0, ... 03319 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03320 776 NtContinue (1244336, 0, ... 03321 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03322 776 NtContinue (1244336, 0, ... 03323 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03324 776 NtContinue (1244336, 0, ... 03325 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03326 776 NtContinue (1244336, 0, ... 03327 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03328 776 NtContinue (1244336, 0, ... 03329 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03330 776 NtContinue (1244336, 0, ... 03331 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03332 776 NtContinue (1244336, 0, ... 03333 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03334 776 NtContinue (1244336, 0, ... 03335 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03336 776 NtContinue (1244336, 0, ... 03337 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03338 776 NtContinue (1244336, 0, ... 03339 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03340 776 NtContinue (1244336, 0, ... 03341 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03342 776 NtContinue (1244336, 0, ... 03343 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03344 776 NtContinue (1244336, 0, ... 03345 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03346 776 NtContinue (1244336, 0, ... 03347 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03348 776 NtContinue (1244336, 0, ... 03349 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03350 776 NtContinue (1244336, 0, ... 03351 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03352 776 NtContinue (1244336, 0, ... 03353 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03354 776 NtContinue (1244336, 0, ... 03355 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03356 776 NtContinue (1244336, 0, ... 03357 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03358 776 NtContinue (1244336, 0, ... 03359 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03360 776 NtContinue (1244336, 0, ... 03361 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03362 776 NtContinue (1244336, 0, ... 03363 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03364 776 NtContinue (1244336, 0, ... 03365 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03366 776 NtContinue (1244336, 0, ... 03367 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03368 776 NtContinue (1244336, 0, ... 03369 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03370 776 NtContinue (1244336, 0, ... 03371 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03372 776 NtContinue (1244336, 0, ... 03373 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03374 776 NtContinue (1244336, 0, ... 03375 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03376 776 NtContinue (1244336, 0, ... 03377 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03378 776 NtContinue (1244336, 0, ... 03379 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03380 776 NtContinue (1244336, 0, ... 03381 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03382 776 NtContinue (1244336, 0, ... 03383 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03384 776 NtContinue (1244336, 0, ... 03385 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03386 776 NtContinue (1244336, 0, ... 03387 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03388 776 NtContinue (1244336, 0, ... 03389 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03390 776 NtContinue (1244336, 0, ... 03391 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03392 776 NtContinue (1244336, 0, ... 03393 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03394 776 NtContinue (1244336, 0, ... 03395 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03396 776 NtContinue (1244336, 0, ... 03397 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03398 776 NtContinue (1244336, 0, ... 03399 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03400 776 NtContinue (1244336, 0, ... 03401 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03402 776 NtContinue (1244336, 0, ... 03403 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03404 776 NtContinue (1244336, 0, ... 03405 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03406 776 NtContinue (1244336, 0, ... 03407 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03408 776 NtContinue (1244336, 0, ... 03409 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03410 776 NtContinue (1244336, 0, ... 03411 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03412 776 NtContinue (1244336, 0, ... 03413 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03414 776 NtContinue (1244336, 0, ... 03415 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03416 776 NtContinue (1244336, 0, ... 03417 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03418 776 NtContinue (1244336, 0, ... 03419 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03420 776 NtContinue (1244336, 0, ... 03421 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03422 776 NtContinue (1244336, 0, ... 03423 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03424 776 NtContinue (1244336, 0, ... 03425 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03426 776 NtContinue (1244336, 0, ... 03427 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03428 776 NtContinue (1244336, 0, ... 03429 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03430 776 NtContinue (1244336, 0, ... 03431 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03432 776 NtContinue (1244336, 0, ... 03433 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03434 776 NtContinue (1244336, 0, ... 03435 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03436 776 NtContinue (1244336, 0, ... 03437 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03438 776 NtContinue (1244336, 0, ... 03439 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03440 776 NtContinue (1244336, 0, ... 03441 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03442 776 NtContinue (1244336, 0, ... 03443 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03444 776 NtContinue (1244336, 0, ... 03445 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03446 776 NtContinue (1244336, 0, ... 03447 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03448 776 NtContinue (1244336, 0, ... 03449 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03450 776 NtContinue (1244336, 0, ... 03451 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03452 776 NtContinue (1244336, 0, ... 03453 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03454 776 NtContinue (1244336, 0, ... 03455 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03456 776 NtContinue (1244336, 0, ... 03457 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03458 776 NtContinue (1244336, 0, ... 03459 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03460 776 NtContinue (1244336, 0, ... 03461 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03462 776 NtContinue (1244336, 0, ... 03463 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03464 776 NtContinue (1244336, 0, ... 03465 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03466 776 NtContinue (1244336, 0, ... 03467 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03468 776 NtContinue (1244336, 0, ... 03469 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03470 776 NtContinue (1244336, 0, ... 03471 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03472 776 NtContinue (1244336, 0, ... 03473 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03474 776 NtContinue (1244336, 0, ... 03475 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03476 776 NtContinue (1244336, 0, ... 03477 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03478 776 NtContinue (1244336, 0, ... 03479 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03480 776 NtContinue (1244336, 0, ... 03481 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03482 776 NtContinue (1244336, 0, ... 03483 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03484 776 NtContinue (1244336, 0, ... 03485 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03486 776 NtContinue (1244336, 0, ... 03487 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03488 776 NtContinue (1244336, 0, ... 03489 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03490 776 NtContinue (1244336, 0, ... 03491 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03492 776 NtContinue (1244336, 0, ... 03493 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03494 776 NtContinue (1244336, 0, ... 03495 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03496 776 NtContinue (1244336, 0, ... 03497 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03498 776 NtContinue (1244336, 0, ... 03499 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03500 776 NtContinue (1244336, 0, ... 03501 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03502 776 NtContinue (1244336, 0, ... 03503 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03504 776 NtContinue (1244336, 0, ... 03505 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03506 776 NtContinue (1244336, 0, ... 03507 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03508 776 NtContinue (1244336, 0, ... 03509 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03510 776 NtContinue (1244336, 0, ... 03511 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03512 776 NtContinue (1244336, 0, ... 03513 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03514 776 NtContinue (1244336, 0, ... 03515 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03516 776 NtContinue (1244336, 0, ... 03517 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03518 776 NtContinue (1244336, 0, ... 03519 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03520 776 NtContinue (1244336, 0, ... 03521 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03522 776 NtContinue (1244336, 0, ... 03523 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03524 776 NtContinue (1244336, 0, ... 03525 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03526 776 NtContinue (1244336, 0, ... 03527 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03528 776 NtContinue (1244336, 0, ... 03529 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03530 776 NtContinue (1244336, 0, ... 03531 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03532 776 NtContinue (1244336, 0, ... 03533 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03534 776 NtContinue (1244336, 0, ... 03535 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03536 776 NtContinue (1244336, 0, ... 03537 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03538 776 NtContinue (1244336, 0, ... 03539 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03540 776 NtContinue (1244336, 0, ... 03541 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03542 776 NtContinue (1244336, 0, ... 03543 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03544 776 NtContinue (1244336, 0, ... 03545 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03546 776 NtContinue (1244336, 0, ... 03547 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03548 776 NtContinue (1244336, 0, ... 03549 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03550 776 NtContinue (1244336, 0, ... 03551 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03552 776 NtContinue (1244336, 0, ... 03553 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03554 776 NtContinue (1244336, 0, ... 03555 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03556 776 NtContinue (1244336, 0, ... 03557 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03558 776 NtContinue (1244336, 0, ... 03559 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03560 776 NtContinue (1244336, 0, ... 03561 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03562 776 NtContinue (1244336, 0, ... 03563 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03564 776 NtContinue (1244336, 0, ... 03565 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03566 776 NtContinue (1244336, 0, ... 03567 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03568 776 NtContinue (1244336, 0, ... 03569 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03570 776 NtContinue (1244336, 0, ... 03571 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03572 776 NtContinue (1244336, 0, ... 03573 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03574 776 NtContinue (1244336, 0, ... 03575 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03576 776 NtContinue (1244336, 0, ... 03577 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03578 776 NtContinue (1244336, 0, ... 03579 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03580 776 NtContinue (1244336, 0, ... 03581 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03582 776 NtContinue (1244336, 0, ... 03583 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03584 776 NtContinue (1244336, 0, ... 03585 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03586 776 NtContinue (1244336, 0, ... 03587 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03588 776 NtContinue (1244336, 0, ... 03589 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03590 776 NtContinue (1244336, 0, ... 03591 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03592 776 NtContinue (1244336, 0, ... 03593 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03594 776 NtContinue (1244336, 0, ... 03595 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03596 776 NtContinue (1244336, 0, ... 03597 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03598 776 NtContinue (1244336, 0, ... 03599 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03600 776 NtContinue (1244336, 0, ... 03601 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03602 776 NtContinue (1244336, 0, ... 03603 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03604 776 NtContinue (1244336, 0, ... 03605 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03606 776 NtContinue (1244336, 0, ... 03607 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03608 776 NtContinue (1244336, 0, ... 03609 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03610 776 NtContinue (1244336, 0, ... 03611 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03612 776 NtContinue (1244336, 0, ... 03613 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03614 776 NtContinue (1244336, 0, ... 03615 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03616 776 NtContinue (1244336, 0, ... 03617 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03618 776 NtContinue (1244336, 0, ... 03619 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03620 776 NtContinue (1244336, 0, ... 03621 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03622 776 NtContinue (1244336, 0, ... 03623 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03624 776 NtContinue (1244336, 0, ... 03625 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03626 776 NtContinue (1244336, 0, ... 03627 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03628 776 NtContinue (1244336, 0, ... 03629 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03630 776 NtContinue (1244336, 0, ... 03631 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03632 776 NtContinue (1244336, 0, ... 03633 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03634 776 NtContinue (1244336, 0, ... 03635 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03636 776 NtContinue (1244336, 0, ... 03637 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03638 776 NtContinue (1244336, 0, ... 03639 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03640 776 NtContinue (1244336, 0, ... 03641 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03642 776 NtContinue (1244336, 0, ... 03643 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03644 776 NtContinue (1244336, 0, ... 03645 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03646 776 NtContinue (1244336, 0, ... 03647 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03648 776 NtContinue (1244336, 0, ... 03649 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03650 776 NtContinue (1244336, 0, ... 03651 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03652 776 NtContinue (1244336, 0, ... 03653 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03654 776 NtContinue (1244336, 0, ... 03655 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03656 776 NtContinue (1244336, 0, ... 03657 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03658 776 NtContinue (1244336, 0, ... 03659 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03660 776 NtContinue (1244336, 0, ... 03661 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03662 776 NtContinue (1244336, 0, ... 03663 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03664 776 NtContinue (1244336, 0, ... 03665 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03666 776 NtContinue (1244336, 0, ... 03667 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03668 776 NtContinue (1244336, 0, ... 03669 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03670 776 NtContinue (1244336, 0, ... 03671 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03672 776 NtContinue (1244336, 0, ... 03673 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03674 776 NtContinue (1244336, 0, ... 03675 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03676 776 NtContinue (1244336, 0, ... 03677 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03678 776 NtContinue (1244336, 0, ... 03679 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03680 776 NtContinue (1244336, 0, ... 03681 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03682 776 NtContinue (1244336, 0, ... 03683 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03684 776 NtContinue (1244336, 0, ... 03685 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03686 776 NtContinue (1244336, 0, ... 03687 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03688 776 NtContinue (1244336, 0, ... 03689 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03690 776 NtContinue (1244336, 0, ... 03691 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03692 776 NtContinue (1244336, 0, ... 03693 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03694 776 NtContinue (1244336, 0, ... 03695 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03696 776 NtContinue (1244336, 0, ... 03697 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03698 776 NtContinue (1244336, 0, ... 03699 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03700 776 NtContinue (1244336, 0, ... 03701 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03702 776 NtContinue (1244336, 0, ... 03703 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03704 776 NtContinue (1244336, 0, ... 03705 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03706 776 NtContinue (1244336, 0, ... 03707 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03708 776 NtContinue (1244336, 0, ... 03709 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03710 776 NtContinue (1244336, 0, ... 03711 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03712 776 NtContinue (1244336, 0, ... 03713 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03714 776 NtContinue (1244336, 0, ... 03715 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03716 776 NtContinue (1244336, 0, ... 03717 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03718 776 NtContinue (1244336, 0, ... 03719 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03720 776 NtContinue (1244336, 0, ... 03721 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03722 776 NtContinue (1244336, 0, ... 03723 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03724 776 NtContinue (1244336, 0, ... 03725 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03726 776 NtContinue (1244336, 0, ... 03727 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03728 776 NtContinue (1244336, 0, ... 03729 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03730 776 NtContinue (1244336, 0, ... 03731 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03732 776 NtContinue (1244336, 0, ... 03733 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03734 776 NtContinue (1244336, 0, ... 03735 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03736 776 NtContinue (1244336, 0, ... 03737 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03738 776 NtContinue (1244336, 0, ... 03739 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03740 776 NtContinue (1244336, 0, ... 03741 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03742 776 NtContinue (1244336, 0, ... 03743 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03744 776 NtContinue (1244336, 0, ... 03745 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03746 776 NtContinue (1244336, 0, ... 03747 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03748 776 NtContinue (1244336, 0, ... 03749 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03750 776 NtContinue (1244336, 0, ... 03751 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03752 776 NtContinue (1244336, 0, ... 03753 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03754 776 NtContinue (1244336, 0, ... 03755 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03756 776 NtContinue (1244336, 0, ... 03757 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03758 776 NtContinue (1244336, 0, ... 03759 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03760 776 NtContinue (1244336, 0, ... 03761 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03762 776 NtContinue (1244336, 0, ... 03763 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03764 776 NtContinue (1244336, 0, ... 03765 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03766 776 NtContinue (1244336, 0, ... 03767 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03768 776 NtContinue (1244336, 0, ... 03769 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03770 776 NtContinue (1244336, 0, ... 03771 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03772 776 NtContinue (1244336, 0, ... 03773 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03774 776 NtContinue (1244336, 0, ... 03775 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03776 776 NtContinue (1244336, 0, ... 03777 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03778 776 NtContinue (1244336, 0, ... 03779 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03780 776 NtContinue (1244336, 0, ... 03781 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03782 776 NtContinue (1244336, 0, ... 03783 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03784 776 NtContinue (1244336, 0, ... 03785 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03786 776 NtContinue (1244336, 0, ... 03787 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03788 776 NtContinue (1244336, 0, ... 03789 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03790 776 NtContinue (1244336, 0, ... 03791 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03792 776 NtContinue (1244336, 0, ... 03793 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03794 776 NtContinue (1244336, 0, ... 03795 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03796 776 NtContinue (1244336, 0, ... 03797 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03798 776 NtContinue (1244336, 0, ... 03799 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03800 776 NtContinue (1244336, 0, ... 03801 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03802 776 NtContinue (1244336, 0, ... 03803 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03804 776 NtContinue (1244336, 0, ... 03805 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03806 776 NtContinue (1244336, 0, ... 03807 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03808 776 NtContinue (1244336, 0, ... 03809 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03810 776 NtContinue (1244336, 0, ... 03811 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03812 776 NtContinue (1244336, 0, ... 03813 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03814 776 NtContinue (1244336, 0, ... 03815 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03816 776 NtContinue (1244336, 0, ... 03817 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03818 776 NtContinue (1244336, 0, ... 03819 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03820 776 NtContinue (1244336, 0, ... 03821 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03822 776 NtContinue (1244336, 0, ... 03823 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03824 776 NtContinue (1244336, 0, ... 03825 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03826 776 NtContinue (1244336, 0, ... 03827 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03828 776 NtContinue (1244336, 0, ... 03829 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03830 776 NtContinue (1244336, 0, ... 03831 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03832 776 NtContinue (1244336, 0, ... 03833 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03834 776 NtContinue (1244336, 0, ... 03835 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03836 776 NtContinue (1244336, 0, ... 03837 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03838 776 NtContinue (1244336, 0, ... 03839 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03840 776 NtContinue (1244336, 0, ... 03841 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03842 776 NtContinue (1244336, 0, ... 03843 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03844 776 NtContinue (1244336, 0, ... 03845 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03846 776 NtContinue (1244336, 0, ... 03847 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03848 776 NtContinue (1244336, 0, ... 03849 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03850 776 NtContinue (1244336, 0, ... 03851 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03852 776 NtContinue (1244336, 0, ... 03853 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03854 776 NtContinue (1244336, 0, ... 03855 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03856 776 NtContinue (1244336, 0, ... 03857 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03858 776 NtContinue (1244336, 0, ... 03859 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03860 776 NtContinue (1244336, 0, ... 03861 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03862 776 NtContinue (1244336, 0, ... 03863 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03864 776 NtContinue (1244336, 0, ... 03865 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03866 776 NtContinue (1244336, 0, ... 03867 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03868 776 NtContinue (1244336, 0, ... 03869 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03870 776 NtContinue (1244336, 0, ... 03871 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03872 776 NtContinue (1244336, 0, ... 03873 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03874 776 NtContinue (1244336, 0, ... 03875 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03876 776 NtContinue (1244336, 0, ... 03877 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03878 776 NtContinue (1244336, 0, ... 03879 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03880 776 NtContinue (1244336, 0, ... 03881 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03882 776 NtContinue (1244336, 0, ... 03883 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03884 776 NtContinue (1244336, 0, ... 03885 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03886 776 NtContinue (1244336, 0, ... 03887 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03888 776 NtContinue (1244336, 0, ... 03889 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03890 776 NtContinue (1244336, 0, ... 03891 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03892 776 NtContinue (1244336, 0, ... 03893 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03894 776 NtContinue (1244336, 0, ... 03895 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03896 776 NtContinue (1244336, 0, ... 03897 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03898 776 NtContinue (1244336, 0, ... 03899 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03900 776 NtContinue (1244336, 0, ... 03901 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03902 776 NtContinue (1244336, 0, ... 03903 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03904 776 NtContinue (1244336, 0, ... 03905 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03906 776 NtContinue (1244336, 0, ... 03907 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03908 776 NtContinue (1244336, 0, ... 03909 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03910 776 NtContinue (1244336, 0, ... 03911 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03912 776 NtContinue (1244336, 0, ... 03913 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03914 776 NtContinue (1244336, 0, ... 03915 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03916 776 NtContinue (1244336, 0, ... 03917 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03918 776 NtContinue (1244336, 0, ... 03919 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03920 776 NtContinue (1244336, 0, ... 03921 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03922 776 NtContinue (1244336, 0, ... 03923 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03924 776 NtContinue (1244336, 0, ... 03925 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03926 776 NtContinue (1244336, 0, ... 03927 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03928 776 NtContinue (1244336, 0, ... 03929 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03930 776 NtContinue (1244336, 0, ... 03931 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03932 776 NtContinue (1244336, 0, ... 03933 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03934 776 NtContinue (1244336, 0, ... 03935 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03936 776 NtContinue (1244336, 0, ... 03937 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03938 776 NtContinue (1244336, 0, ... 03939 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03940 776 NtContinue (1244336, 0, ... 03941 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03942 776 NtContinue (1244336, 0, ... 03943 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03944 776 NtContinue (1244336, 0, ... 03945 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03946 776 NtContinue (1244336, 0, ... 03947 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03948 776 NtContinue (1244336, 0, ... 03949 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03950 776 NtContinue (1244336, 0, ... 03951 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03952 776 NtContinue (1244336, 0, ... 03953 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03954 776 NtContinue (1244336, 0, ... 03955 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03956 776 NtContinue (1244336, 0, ... 03957 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03958 776 NtContinue (1244336, 0, ... 03959 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03960 776 NtContinue (1244336, 0, ... 03961 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03962 776 NtContinue (1244336, 0, ... 03963 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03964 776 NtContinue (1244336, 0, ... 03965 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03966 776 NtContinue (1244336, 0, ... 03967 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03968 776 NtContinue (1244336, 0, ... 03969 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03970 776 NtContinue (1244336, 0, ... 03971 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03972 776 NtContinue (1244336, 0, ... 03973 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03974 776 NtContinue (1244336, 0, ... 03975 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03976 776 NtContinue (1244336, 0, ... 03977 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03978 776 NtContinue (1244336, 0, ... 03979 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03980 776 NtContinue (1244336, 0, ... 03981 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03982 776 NtContinue (1244336, 0, ... 03983 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03984 776 NtContinue (1244336, 0, ... 03985 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03986 776 NtContinue (1244336, 0, ... 03987 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03988 776 NtContinue (1244336, 0, ... 03989 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03990 776 NtContinue (1244336, 0, ... 03991 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03992 776 NtContinue (1244336, 0, ... 03993 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03994 776 NtContinue (1244336, 0, ... 03995 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03996 776 NtContinue (1244336, 0, ... 03997 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03998 776 NtContinue (1244336, 0, ... 03999 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04000 776 NtContinue (1244336, 0, ... 04001 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04002 776 NtContinue (1244336, 0, ... 04003 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04004 776 NtContinue (1244336, 0, ... 04005 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04006 776 NtContinue (1244336, 0, ... 04007 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04008 776 NtContinue (1244336, 0, ... 04009 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04010 776 NtContinue (1244336, 0, ... 04011 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04012 776 NtContinue (1244336, 0, ... 04013 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04014 776 NtContinue (1244336, 0, ... 04015 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04016 776 NtContinue (1244336, 0, ... 04017 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04018 776 NtContinue (1244336, 0, ... 04019 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04020 776 NtContinue (1244336, 0, ... 04021 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04022 776 NtContinue (1244336, 0, ... 04023 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04024 776 NtContinue (1244336, 0, ... 04025 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04026 776 NtContinue (1244336, 0, ... 04027 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04028 776 NtContinue (1244336, 0, ... 04029 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04030 776 NtContinue (1244336, 0, ... 04031 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04032 776 NtContinue (1244336, 0, ... 04033 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04034 776 NtContinue (1244336, 0, ... 04035 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04036 776 NtContinue (1244336, 0, ... 04037 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04038 776 NtContinue (1244336, 0, ... 04039 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04040 776 NtContinue (1244336, 0, ... 04041 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04042 776 NtContinue (1244336, 0, ... 04043 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04044 776 NtContinue (1244336, 0, ... 04045 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04046 776 NtContinue (1244336, 0, ... 04047 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04048 776 NtContinue (1244336, 0, ... 04049 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04050 776 NtContinue (1244336, 0, ... 04051 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04052 776 NtContinue (1244336, 0, ... 04053 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04054 776 NtContinue (1244336, 0, ... 04055 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04056 776 NtContinue (1244336, 0, ... 04057 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04058 776 NtContinue (1244336, 0, ... 04059 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04060 776 NtContinue (1244336, 0, ... 04061 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04062 776 NtContinue (1244336, 0, ... 04063 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04064 776 NtContinue (1244336, 0, ... 04065 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04066 776 NtContinue (1244336, 0, ... 04067 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04068 776 NtContinue (1244336, 0, ... 04069 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04070 776 NtContinue (1244336, 0, ... 04071 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04072 776 NtContinue (1244336, 0, ... 04073 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04074 776 NtContinue (1244336, 0, ... 04075 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04076 776 NtContinue (1244336, 0, ... 04077 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04078 776 NtContinue (1244336, 0, ... 04079 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04080 776 NtContinue (1244336, 0, ... 04081 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04082 776 NtContinue (1244336, 0, ... 04083 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04084 776 NtContinue (1244336, 0, ... 04085 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04086 776 NtContinue (1244336, 0, ... 04087 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04088 776 NtContinue (1244336, 0, ... 04089 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04090 776 NtContinue (1244336, 0, ... 04091 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04092 776 NtContinue (1244336, 0, ... 04093 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04094 776 NtContinue (1244336, 0, ... 04095 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04096 776 NtContinue (1244336, 0, ... 04097 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04098 776 NtContinue (1244336, 0, ... 04099 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04100 776 NtContinue (1244336, 0, ... 04101 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04102 776 NtContinue (1244336, 0, ... 04103 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04104 776 NtContinue (1244336, 0, ... 04105 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04106 776 NtContinue (1244336, 0, ... 04107 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04108 776 NtContinue (1244336, 0, ... 04109 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04110 776 NtContinue (1244336, 0, ... 04111 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04112 776 NtContinue (1244336, 0, ... 04113 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04114 776 NtContinue (1244336, 0, ... 04115 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04116 776 NtContinue (1244336, 0, ... 04117 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04118 776 NtContinue (1244336, 0, ... 04119 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04120 776 NtContinue (1244336, 0, ... 04121 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04122 776 NtContinue (1244336, 0, ... 04123 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04124 776 NtContinue (1244336, 0, ... 04125 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04126 776 NtContinue (1244336, 0, ... 04127 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04128 776 NtContinue (1244336, 0, ... 04129 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04130 776 NtContinue (1244336, 0, ... 04131 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04132 776 NtContinue (1244336, 0, ... 04133 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04134 776 NtContinue (1244336, 0, ... 04135 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04136 776 NtContinue (1244336, 0, ... 04137 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04138 776 NtContinue (1244336, 0, ... 04139 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04140 776 NtContinue (1244336, 0, ... 04141 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04142 776 NtContinue (1244336, 0, ... 04143 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04144 776 NtContinue (1244336, 0, ... 04145 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04146 776 NtContinue (1244336, 0, ... 04147 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04148 776 NtContinue (1244336, 0, ... 04149 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04150 776 NtContinue (1244336, 0, ... 04151 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04152 776 NtContinue (1244336, 0, ... 04153 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04154 776 NtContinue (1244336, 0, ... 04155 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04156 776 NtContinue (1244336, 0, ... 04157 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04158 776 NtContinue (1244336, 0, ... 04159 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04160 776 NtContinue (1244336, 0, ... 04161 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04162 776 NtContinue (1244336, 0, ... 04163 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04164 776 NtContinue (1244336, 0, ... 04165 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04166 776 NtContinue (1244336, 0, ... 04167 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04168 776 NtContinue (1244336, 0, ... 04169 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04170 776 NtContinue (1244336, 0, ... 04171 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04172 776 NtContinue (1244336, 0, ... 04173 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04174 776 NtContinue (1244336, 0, ... 04175 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04176 776 NtContinue (1244336, 0, ... 04177 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04178 776 NtContinue (1244336, 0, ... 04179 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04180 776 NtContinue (1244336, 0, ... 04181 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04182 776 NtContinue (1244336, 0, ... 04183 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04184 776 NtContinue (1244336, 0, ... 04185 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04186 776 NtContinue (1244336, 0, ... 04187 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04188 776 NtContinue (1244336, 0, ... 04189 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04190 776 NtContinue (1244336, 0, ... 04191 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04192 776 NtContinue (1244336, 0, ... 04193 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04194 776 NtContinue (1244336, 0, ... 04195 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04196 776 NtContinue (1244336, 0, ... 04197 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04198 776 NtContinue (1244336, 0, ... 04199 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04200 776 NtContinue (1244336, 0, ... 04201 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04202 776 NtContinue (1244336, 0, ... 04203 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04204 776 NtContinue (1244336, 0, ... 04205 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04206 776 NtContinue (1244336, 0, ... 04207 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04208 776 NtContinue (1244336, 0, ... 04209 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04210 776 NtContinue (1244336, 0, ... 04211 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04212 776 NtContinue (1244336, 0, ... 04213 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04214 776 NtContinue (1244336, 0, ... 04215 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04216 776 NtContinue (1244336, 0, ... 04217 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04218 776 NtContinue (1244336, 0, ... 04219 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04220 776 NtContinue (1244336, 0, ... 04221 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04222 776 NtContinue (1244336, 0, ... 04223 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04224 776 NtContinue (1244336, 0, ... 04225 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04226 776 NtContinue (1244336, 0, ... 04227 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04228 776 NtContinue (1244336, 0, ... 04229 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04230 776 NtContinue (1244336, 0, ... 04231 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04232 776 NtContinue (1244336, 0, ... 04233 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04234 776 NtContinue (1244336, 0, ... 04235 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04236 776 NtContinue (1244336, 0, ... 04237 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04238 776 NtContinue (1244336, 0, ... 04239 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04240 776 NtContinue (1244336, 0, ... 04241 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04242 776 NtContinue (1244336, 0, ... 04243 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04244 776 NtContinue (1244336, 0, ... 04245 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04246 776 NtContinue (1244336, 0, ... 04247 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04248 776 NtContinue (1244336, 0, ... 04249 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04250 776 NtContinue (1244336, 0, ... 04251 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04252 776 NtContinue (1244336, 0, ... 04253 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04254 776 NtContinue (1244336, 0, ... 04255 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04256 776 NtContinue (1244336, 0, ... 04257 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04258 776 NtContinue (1244336, 0, ... 04259 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04260 776 NtContinue (1244336, 0, ... 04261 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04262 776 NtContinue (1244336, 0, ... 04263 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04264 776 NtContinue (1244336, 0, ... 04265 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04266 776 NtContinue (1244336, 0, ... 04267 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04268 776 NtContinue (1244336, 0, ... 04269 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04270 776 NtContinue (1244336, 0, ... 04271 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04272 776 NtContinue (1244336, 0, ... 04273 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04274 776 NtContinue (1244336, 0, ... 04275 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04276 776 NtContinue (1244336, 0, ... 04277 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04278 776 NtContinue (1244336, 0, ... 04279 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04280 776 NtContinue (1244336, 0, ... 04281 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04282 776 NtContinue (1244336, 0, ... 04283 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04284 776 NtContinue (1244336, 0, ... 04285 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04286 776 NtContinue (1244336, 0, ... 04287 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04288 776 NtContinue (1244336, 0, ... 04289 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04290 776 NtContinue (1244336, 0, ... 04291 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04292 776 NtContinue (1244336, 0, ... 04293 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04294 776 NtContinue (1244336, 0, ... 04295 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04296 776 NtContinue (1244336, 0, ... 04297 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04298 776 NtContinue (1244336, 0, ... 04299 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04300 776 NtContinue (1244336, 0, ... 04301 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04302 776 NtContinue (1244336, 0, ... 04303 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04304 776 NtContinue (1244336, 0, ... 04305 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04306 776 NtContinue (1244336, 0, ... 04307 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04308 776 NtContinue (1244336, 0, ... 04309 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04310 776 NtContinue (1244336, 0, ... 04311 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04312 776 NtContinue (1244336, 0, ... 04313 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04314 776 NtContinue (1244336, 0, ... 04315 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04316 776 NtContinue (1244336, 0, ... 04317 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04318 776 NtContinue (1244336, 0, ... 04319 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04320 776 NtContinue (1244336, 0, ... 04321 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04322 776 NtContinue (1244336, 0, ... 04323 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04324 776 NtContinue (1244336, 0, ... 04325 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04326 776 NtContinue (1244336, 0, ... 04327 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04328 776 NtContinue (1244336, 0, ... 04329 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04330 776 NtContinue (1244336, 0, ... 04331 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04332 776 NtContinue (1244336, 0, ... 04333 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04334 776 NtContinue (1244336, 0, ... 04335 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04336 776 NtContinue (1244336, 0, ... 04337 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04338 776 NtContinue (1244336, 0, ... 04339 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04340 776 NtContinue (1244336, 0, ... 04341 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04342 776 NtContinue (1244336, 0, ... 04343 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04344 776 NtContinue (1244336, 0, ... 04345 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04346 776 NtContinue (1244336, 0, ... 04347 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04348 776 NtContinue (1244336, 0, ... 04349 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04350 776 NtContinue (1244336, 0, ... 04351 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04352 776 NtContinue (1244336, 0, ... 04353 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04354 776 NtContinue (1244336, 0, ... 04355 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04356 776 NtContinue (1244336, 0, ... 04357 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04358 776 NtContinue (1244336, 0, ... 04359 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04360 776 NtContinue (1244336, 0, ... 04361 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04362 776 NtContinue (1244336, 0, ... 04363 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04364 776 NtContinue (1244336, 0, ... 04365 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04366 776 NtContinue (1244336, 0, ... 04367 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04368 776 NtContinue (1244336, 0, ... 04369 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04370 776 NtContinue (1244336, 0, ... 04371 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04372 776 NtContinue (1244336, 0, ... 04373 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04374 776 NtContinue (1244336, 0, ... 04375 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04376 776 NtContinue (1244336, 0, ... 04377 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04378 776 NtContinue (1244336, 0, ... 04379 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04380 776 NtContinue (1244336, 0, ... 04381 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04382 776 NtContinue (1244336, 0, ... 04383 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04384 776 NtContinue (1244336, 0, ... 04385 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04386 776 NtContinue (1244336, 0, ... 04387 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04388 776 NtContinue (1244336, 0, ... 04389 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04390 776 NtContinue (1244336, 0, ... 04391 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04392 776 NtContinue (1244336, 0, ... 04393 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04394 776 NtContinue (1244336, 0, ... 04395 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04396 776 NtContinue (1244336, 0, ... 04397 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04398 776 NtContinue (1244336, 0, ... 04399 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04400 776 NtContinue (1244336, 0, ... 04401 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04402 776 NtContinue (1244336, 0, ... 04403 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04404 776 NtContinue (1244336, 0, ... 04405 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04406 776 NtContinue (1244336, 0, ... 04407 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04408 776 NtContinue (1244336, 0, ... 04409 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04410 776 NtContinue (1244336, 0, ... 04411 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04412 776 NtContinue (1244336, 0, ... 04413 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04414 776 NtContinue (1244336, 0, ... 04415 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04416 776 NtContinue (1244336, 0, ... 04417 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04418 776 NtContinue (1244336, 0, ... 04419 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04420 776 NtContinue (1244336, 0, ... 04421 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04422 776 NtContinue (1244336, 0, ... 04423 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04424 776 NtContinue (1244336, 0, ... 04425 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04426 776 NtContinue (1244336, 0, ... 04427 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04428 776 NtContinue (1244336, 0, ... 04429 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04430 776 NtContinue (1244336, 0, ... 04431 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04432 776 NtContinue (1244336, 0, ... 04433 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04434 776 NtContinue (1244336, 0, ... 04435 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04436 776 NtContinue (1244336, 0, ... 04437 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04438 776 NtContinue (1244336, 0, ... 04439 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04440 776 NtContinue (1244336, 0, ... 04441 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04442 776 NtContinue (1244336, 0, ... 04443 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04444 776 NtContinue (1244336, 0, ... 04445 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04446 776 NtContinue (1244336, 0, ... 04447 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04448 776 NtContinue (1244336, 0, ... 04449 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04450 776 NtContinue (1244336, 0, ... 04451 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04452 776 NtContinue (1244336, 0, ... 04453 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04454 776 NtContinue (1244336, 0, ... 04455 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04456 776 NtContinue (1244336, 0, ... 04457 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04458 776 NtContinue (1244336, 0, ... 04459 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04460 776 NtContinue (1244336, 0, ... 04461 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04462 776 NtContinue (1244336, 0, ... 04463 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04464 776 NtContinue (1244336, 0, ... 04465 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04466 776 NtContinue (1244336, 0, ... 04467 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04468 776 NtContinue (1244336, 0, ... 04469 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04470 776 NtContinue (1244336, 0, ... 04471 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04472 776 NtContinue (1244336, 0, ... 04473 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04474 776 NtContinue (1244336, 0, ... 04475 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04476 776 NtContinue (1244336, 0, ... 04477 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04478 776 NtContinue (1244336, 0, ... 04479 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04480 776 NtContinue (1244336, 0, ... 04481 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04482 776 NtContinue (1244336, 0, ... 04483 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04484 776 NtContinue (1244336, 0, ... 04485 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04486 776 NtContinue (1244336, 0, ... 04487 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04488 776 NtContinue (1244336, 0, ... 04489 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04490 776 NtContinue (1244336, 0, ... 04491 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04492 776 NtContinue (1244336, 0, ... 04493 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04494 776 NtContinue (1244336, 0, ... 04495 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04496 776 NtContinue (1244336, 0, ... 04497 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04498 776 NtContinue (1244336, 0, ... 04499 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04500 776 NtContinue (1244336, 0, ... 04501 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04502 776 NtContinue (1244336, 0, ... 04503 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04504 776 NtContinue (1244336, 0, ... 04505 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04506 776 NtContinue (1244336, 0, ... 04507 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04508 776 NtContinue (1244336, 0, ... 04509 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04510 776 NtContinue (1244336, 0, ... 04511 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04512 776 NtContinue (1244336, 0, ... 04513 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04514 776 NtContinue (1244336, 0, ... 04515 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04516 776 NtContinue (1244336, 0, ... 04517 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04518 776 NtContinue (1244336, 0, ... 04519 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04520 776 NtContinue (1244336, 0, ... 04521 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04522 776 NtContinue (1244336, 0, ... 04523 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04524 776 NtContinue (1244336, 0, ... 04525 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04526 776 NtContinue (1244336, 0, ... 04527 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04528 776 NtContinue (1244336, 0, ... 04529 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04530 776 NtContinue (1244336, 0, ... 04531 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04532 776 NtContinue (1244336, 0, ... 04533 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04534 776 NtContinue (1244336, 0, ... 04535 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04536 776 NtContinue (1244336, 0, ... 04537 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04538 776 NtContinue (1244336, 0, ... 04539 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04540 776 NtContinue (1244336, 0, ... 04541 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04542 776 NtContinue (1244336, 0, ... 04543 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04544 776 NtContinue (1244336, 0, ... 04545 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04546 776 NtContinue (1244336, 0, ... 04547 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04548 776 NtContinue (1244336, 0, ... 04549 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04550 776 NtContinue (1244336, 0, ... 04551 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04552 776 NtContinue (1244336, 0, ... 04553 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04554 776 NtContinue (1244336, 0, ... 04555 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04556 776 NtContinue (1244336, 0, ... 04557 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04558 776 NtContinue (1244336, 0, ... 04559 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04560 776 NtContinue (1244336, 0, ... 04561 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04562 776 NtContinue (1244336, 0, ... 04563 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04564 776 NtContinue (1244336, 0, ... 04565 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04566 776 NtContinue (1244336, 0, ... 04567 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04568 776 NtContinue (1244336, 0, ... 04569 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04570 776 NtContinue (1244336, 0, ... 04571 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04572 776 NtContinue (1244336, 0, ... 04573 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04574 776 NtContinue (1244336, 0, ... 04575 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04576 776 NtContinue (1244336, 0, ... 04577 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04578 776 NtContinue (1244336, 0, ... 04579 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04580 776 NtContinue (1244336, 0, ... 04581 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04582 776 NtContinue (1244336, 0, ... 04583 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04584 776 NtContinue (1244336, 0, ... 04585 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04586 776 NtContinue (1244336, 0, ... 04587 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04588 776 NtContinue (1244336, 0, ... 04589 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04590 776 NtContinue (1244336, 0, ... 04591 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04592 776 NtContinue (1244336, 0, ... 04593 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04594 776 NtContinue (1244336, 0, ... 04595 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04596 776 NtContinue (1244336, 0, ... 04597 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04598 776 NtContinue (1244336, 0, ... 04599 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04600 776 NtContinue (1244336, 0, ... 04601 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04602 776 NtContinue (1244336, 0, ... 04603 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04604 776 NtContinue (1244336, 0, ... 04605 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04606 776 NtContinue (1244336, 0, ... 04607 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04608 776 NtContinue (1244336, 0, ... 04609 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04610 776 NtContinue (1244336, 0, ... 04611 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04612 776 NtContinue (1244336, 0, ... 04613 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04614 776 NtContinue (1244336, 0, ... 04615 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04616 776 NtContinue (1244336, 0, ... 04617 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04618 776 NtContinue (1244336, 0, ... 04619 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04620 776 NtContinue (1244336, 0, ... 04621 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04622 776 NtContinue (1244336, 0, ... 04623 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04624 776 NtContinue (1244336, 0, ... 04625 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04626 776 NtContinue (1244336, 0, ... 04627 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04628 776 NtContinue (1244336, 0, ... 04629 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04630 776 NtContinue (1244336, 0, ... 04631 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04632 776 NtContinue (1244336, 0, ... 04633 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04634 776 NtContinue (1244336, 0, ... 04635 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04636 776 NtContinue (1244336, 0, ... 04637 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04638 776 NtContinue (1244336, 0, ... 04639 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04640 776 NtContinue (1244336, 0, ... 04641 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04642 776 NtContinue (1244336, 0, ... 04643 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04644 776 NtContinue (1244336, 0, ... 04645 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04646 776 NtContinue (1244336, 0, ... 04647 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04648 776 NtContinue (1244336, 0, ... 04649 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04650 776 NtContinue (1244336, 0, ... 04651 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04652 776 NtContinue (1244336, 0, ... 04653 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04654 776 NtContinue (1244336, 0, ... 04655 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04656 776 NtContinue (1244336, 0, ... 04657 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04658 776 NtContinue (1244336, 0, ... 04659 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04660 776 NtContinue (1244336, 0, ... 04661 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04662 776 NtContinue (1244336, 0, ... 04663 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04664 776 NtContinue (1244336, 0, ... 04665 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04666 776 NtContinue (1244336, 0, ... 04667 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04668 776 NtContinue (1244336, 0, ... 04669 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04670 776 NtContinue (1244336, 0, ... 04671 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04672 776 NtContinue (1244336, 0, ... 04673 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04674 776 NtContinue (1244336, 0, ... 04675 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04676 776 NtContinue (1244336, 0, ... 04677 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04678 776 NtContinue (1244336, 0, ... 04679 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04680 776 NtContinue (1244336, 0, ... 04681 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04682 776 NtContinue (1244336, 0, ... 04683 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04684 776 NtContinue (1244336, 0, ... 04685 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04686 776 NtContinue (1244336, 0, ... 04687 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04688 776 NtContinue (1244336, 0, ... 04689 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04690 776 NtContinue (1244336, 0, ... 04691 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04692 776 NtContinue (1244336, 0, ... 04693 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04694 776 NtContinue (1244336, 0, ... 04695 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04696 776 NtContinue (1244336, 0, ... 04697 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04698 776 NtContinue (1244336, 0, ... 04699 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04700 776 NtContinue (1244336, 0, ... 04701 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04702 776 NtContinue (1244336, 0, ... 04703 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04704 776 NtContinue (1244336, 0, ... 04705 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04706 776 NtContinue (1244336, 0, ... 04707 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04708 776 NtContinue (1244336, 0, ... 04709 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04710 776 NtContinue (1244336, 0, ... 04711 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04712 776 NtContinue (1244336, 0, ... 04713 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04714 776 NtContinue (1244336, 0, ... 04715 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04716 776 NtContinue (1244336, 0, ... 04717 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04718 776 NtContinue (1244336, 0, ... 04719 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04720 776 NtContinue (1244336, 0, ... 04721 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04722 776 NtContinue (1244336, 0, ... 04723 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04724 776 NtContinue (1244336, 0, ... 04725 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04726 776 NtContinue (1244336, 0, ... 04727 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04728 776 NtContinue (1244336, 0, ... 04729 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04730 776 NtContinue (1244336, 0, ... 04731 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04732 776 NtContinue (1244336, 0, ... 04733 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04734 776 NtContinue (1244336, 0, ... 04735 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04736 776 NtContinue (1244336, 0, ... 04737 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04738 776 NtContinue (1244336, 0, ... 04739 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04740 776 NtContinue (1244336, 0, ... 04741 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04742 776 NtContinue (1244336, 0, ... 04743 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04744 776 NtContinue (1244336, 0, ... 04745 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04746 776 NtContinue (1244336, 0, ... 04747 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04748 776 NtContinue (1244336, 0, ... 04749 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04750 776 NtContinue (1244336, 0, ... 04751 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04752 776 NtContinue (1244336, 0, ... 04753 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04754 776 NtContinue (1244336, 0, ... 04755 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04756 776 NtContinue (1244336, 0, ... 04757 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04758 776 NtContinue (1244336, 0, ... 04759 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04760 776 NtContinue (1244336, 0, ... 04761 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04762 776 NtContinue (1244336, 0, ... 04763 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04764 776 NtContinue (1244336, 0, ... 04765 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04766 776 NtContinue (1244336, 0, ... 04767 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04768 776 NtContinue (1244336, 0, ... 04769 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04770 776 NtContinue (1244336, 0, ... 04771 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04772 776 NtContinue (1244336, 0, ... 04773 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04774 776 NtContinue (1244336, 0, ... 04775 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04776 776 NtContinue (1244336, 0, ... 04777 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04778 776 NtContinue (1244336, 0, ... 04779 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04780 776 NtContinue (1244336, 0, ... 04781 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04782 776 NtContinue (1244336, 0, ... 04783 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04784 776 NtContinue (1244336, 0, ... 04785 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04786 776 NtContinue (1244336, 0, ... 04787 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04788 776 NtContinue (1244336, 0, ... 04789 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04790 776 NtContinue (1244336, 0, ... 04791 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04792 776 NtContinue (1244336, 0, ... 04793 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04794 776 NtContinue (1244336, 0, ... 04795 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04796 776 NtContinue (1244336, 0, ... 04797 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04798 776 NtContinue (1244336, 0, ... 04799 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04800 776 NtContinue (1244336, 0, ... 04801 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04802 776 NtContinue (1244336, 0, ... 04803 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04804 776 NtContinue (1244336, 0, ... 04805 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04806 776 NtContinue (1244336, 0, ... 04807 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04808 776 NtContinue (1244336, 0, ... 04809 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04810 776 NtContinue (1244336, 0, ... 04811 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04812 776 NtContinue (1244336, 0, ... 04813 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04814 776 NtContinue (1244336, 0, ... 04815 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04816 776 NtContinue (1244336, 0, ... 04817 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04818 776 NtContinue (1244336, 0, ... 04819 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04820 776 NtContinue (1244336, 0, ... 04821 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04822 776 NtContinue (1244336, 0, ... 04823 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04824 776 NtContinue (1244336, 0, ... 04825 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04826 776 NtContinue (1244336, 0, ... 04827 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04828 776 NtContinue (1244336, 0, ... 04829 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04830 776 NtContinue (1244336, 0, ... 04831 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04832 776 NtContinue (1244336, 0, ... 04833 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04834 776 NtContinue (1244336, 0, ... 04835 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04836 776 NtContinue (1244336, 0, ... 04837 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04838 776 NtContinue (1244336, 0, ... 04839 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04840 776 NtContinue (1244336, 0, ... 04841 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04842 776 NtContinue (1244336, 0, ... 04843 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04844 776 NtContinue (1244336, 0, ... 04845 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04846 776 NtContinue (1244336, 0, ... 04847 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04848 776 NtContinue (1244336, 0, ... 04849 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04850 776 NtContinue (1244336, 0, ... 04851 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04852 776 NtContinue (1244336, 0, ... 04853 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04854 776 NtContinue (1244336, 0, ... 04855 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04856 776 NtContinue (1244336, 0, ... 04857 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04858 776 NtContinue (1244336, 0, ... 04859 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04860 776 NtContinue (1244336, 0, ... 04861 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04862 776 NtContinue (1244336, 0, ... 04863 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04864 776 NtContinue (1244336, 0, ... 04865 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04866 776 NtContinue (1244336, 0, ... 04867 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04868 776 NtContinue (1244336, 0, ... 04869 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04870 776 NtContinue (1244336, 0, ... 04871 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04872 776 NtContinue (1244336, 0, ... 04873 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04874 776 NtContinue (1244336, 0, ... 04875 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04876 776 NtContinue (1244336, 0, ... 04877 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04878 776 NtContinue (1244336, 0, ... 04879 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04880 776 NtContinue (1244336, 0, ... 04881 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04882 776 NtContinue (1244336, 0, ... 04883 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04884 776 NtContinue (1244336, 0, ... 04885 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04886 776 NtContinue (1244336, 0, ... 04887 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04888 776 NtContinue (1244336, 0, ... 04889 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04890 776 NtContinue (1244336, 0, ... 04891 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04892 776 NtContinue (1244336, 0, ... 04893 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04894 776 NtContinue (1244336, 0, ... 04895 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04896 776 NtContinue (1244336, 0, ... 04897 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04898 776 NtContinue (1244336, 0, ... 04899 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04900 776 NtContinue (1244336, 0, ... 04901 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04902 776 NtContinue (1244336, 0, ... 04903 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04904 776 NtContinue (1244336, 0, ... 04905 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04906 776 NtContinue (1244336, 0, ... 04907 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04908 776 NtContinue (1244336, 0, ... 04909 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04910 776 NtContinue (1244336, 0, ... 04911 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04912 776 NtContinue (1244336, 0, ... 04913 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04914 776 NtContinue (1244336, 0, ... 04915 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04916 776 NtContinue (1244336, 0, ... 04917 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04918 776 NtContinue (1244336, 0, ... 04919 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04920 776 NtContinue (1244336, 0, ... 04921 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04922 776 NtContinue (1244336, 0, ... 04923 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04924 776 NtContinue (1244336, 0, ... 04925 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04926 776 NtContinue (1244336, 0, ... 04927 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04928 776 NtContinue (1244336, 0, ... 04929 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04930 776 NtContinue (1244336, 0, ... 04931 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04932 776 NtContinue (1244336, 0, ... 04933 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04934 776 NtContinue (1244336, 0, ... 04935 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04936 776 NtContinue (1244336, 0, ... 04937 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04938 776 NtContinue (1244336, 0, ... 04939 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04940 776 NtContinue (1244336, 0, ... 04941 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04942 776 NtContinue (1244336, 0, ... 04943 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04944 776 NtContinue (1244336, 0, ... 04945 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04946 776 NtContinue (1244336, 0, ... 04947 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04948 776 NtContinue (1244336, 0, ... 04949 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04950 776 NtContinue (1244336, 0, ... 04951 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04952 776 NtContinue (1244336, 0, ... 04953 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04954 776 NtContinue (1244336, 0, ... 04955 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04956 776 NtContinue (1244336, 0, ... 04957 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04958 776 NtContinue (1244336, 0, ... 04959 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04960 776 NtContinue (1244336, 0, ... 04961 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04962 776 NtContinue (1244336, 0, ... 04963 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04964 776 NtContinue (1244336, 0, ... 04965 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04966 776 NtContinue (1244336, 0, ... 04967 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04968 776 NtContinue (1244336, 0, ... 04969 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04970 776 NtContinue (1244336, 0, ... 04971 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04972 776 NtContinue (1244336, 0, ... 04973 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04974 776 NtContinue (1244336, 0, ... 04975 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04976 776 NtContinue (1244336, 0, ... 04977 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04978 776 NtContinue (1244336, 0, ... 04979 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04980 776 NtContinue (1244336, 0, ... 04981 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04982 776 NtContinue (1244336, 0, ... 04983 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04984 776 NtContinue (1244336, 0, ... 04985 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04986 776 NtContinue (1244336, 0, ... 04987 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04988 776 NtContinue (1244336, 0, ... 04989 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04990 776 NtContinue (1244336, 0, ... 04991 776 NtQueryVirtualMemory (-1, 0x47e491, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04992 776 NtContinue (1244336, 0, ...