Summary:

NtAddAtom(>) 1 NtQueryInstallUILanguage(>) 1 NtSetInformationObject(>) 2 NtQueryAttributesFile(>) 14
NtCallbackReturn(>) 1 NtQueryObject(>) 1 NtAccessCheck(>) 3 NtOpenFile(>) 20
NtCreateEvent(>) 1 NtQuerySymbolicLinkObject(>) 1 NtGdiCreateCompatibleDC(>) 3 NtOpenSection(>) 20
NtCreateFile(>) 1 NtQueryVolumeInformationFile(>) 1 NtUserRegisterWindowMessage(>) 3 NtQuerySystemInformation(>) 24
NtCreateKey(>) 1 NtRegisterThreadTerminatePort(>) 1 NtQueryDefaultLocale(>) 4 NtQueryValueKey(>) 26
NtCreateSemaphore(>) 1 NtSecureConnectPort(>) 1 NtGdiGetStockObject(>) 5 NtAllocateVirtualMemory(>) 28
NtDuplicateObject(>) 1 NtSetInformationProcess(>) 1 NtOpenProcessToken(>) 5 NtMapViewOfSection(>) 29
NtEnumerateValueKey(>) 1 NtSetInformationThread(>) 1 NtQueryInformationProcess(>) 5 NtUserFindExistingCursorIcon(>) 50
NtFsControlFile(>) 1 NtSetValueKey(>) 1 NtQuerySection(>) 5 NtOpenKey(>) 60
NtGdiCreateBitmap(>) 1 NtTestAlert(>) 1 NtRequestWaitReplyPort(>) 7 NtUserRegisterClassExWOW(>) 61
NtGdiInit(>) 1 NtUserCallNoParam(>) 1 NtOpenProcessTokenEx(>) 8 NtFlushInstructionCache(>) 65
NtGdiQueryFontAssocInfo(>) 1 NtUserCallOneParam(>) 1 NtOpenThreadTokenEx(>) 8 NtClose(>) 87
NtGdiSelectBitmap(>) 1 NtUserGetDC(>) 1 NtQueryDefaultUILanguage(>) 8 NtProtectVirtualMemory(>) 130
NtOpenEvent(>) 1 NtUserGetThreadDesktop(>) 1 NtUnmapViewOfSection(>) 8 NtContinue(>) 2112
NtOpenKeyedEvent(>) 1 NtDeviceIoControlFile(>) 2 NtQueryDebugFilterState(>) 9 NtQueryVirtualMemory(>) 2116
NtOpenProcess(>) 1 NtFreeVirtualMemory(>) 2 NtQueryInformationToken(>) 11
NtOpenSymbolicLinkObject(>) 1 NtGdiCreateSolidBrush(>) 2 NtUserSystemParametersInfo(>) 11
NtQueryInformationFile(>) 1

Trace:

00001 464 NtOpenFile (0x80100000, {24, 0, 0x240, 0, 0, (0x80100000, {24, 0, 0x240, 0, 0, "\SystemRoot\Prefetch\PACKED.EXE-09ED06A1.pf"}, 0, 32, ... ) }, 0, 32, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00002 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\packed.exe"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00003 464 NtOpenKeyedEvent (0x2000000, {24, 0, 0x0, 0, 0, (0x2000000, {24, 0, 0x0, 0, 0, "\KernelObjects\CritSecOutOfMemoryEvent"}, ... 4, ) }, ... 4, ) == 0x0 00004 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00005 464 NtAllocateVirtualMemory (-1, 0, 0, 1048576, 8192, 4, ... 1310720, 1048576, ) == 0x0 00006 464 NtAllocateVirtualMemory (-1, 1310720, 0, 4096, 4096, 4, ... 1310720, 4096, ) == 0x0 00007 464 NtAllocateVirtualMemory (-1, 1314816, 0, 8192, 4096, 4, ... 1314816, 8192, ) == 0x0 00008 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00009 464 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 2359296, 65536, ) == 0x0 00010 464 NtAllocateVirtualMemory (-1, 2359296, 0, 24576, 4096, 4, ... 2359296, 24576, ) == 0x0 00011 464 NtOpenDirectoryObject (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\KnownDlls"}, ... 8, ) }, ... 8, ) == 0x0 00012 464 NtOpenSymbolicLinkObject (0x1, {24, 8, 0x40, 0, 0, (0x1, {24, 8, 0x40, 0, 0, "KnownDllPath"}, ... 12, ) }, ... 12, ) == 0x0 00013 464 NtQuerySymbolicLinkObject (12, ... (12, ... "C:\WINDOWS\system32", 0x0, ) , 0x0, ) == 0x0 00014 464 NtClose (12, ... ) == 0x0 00015 464 NtOpenFile (0x100020, {24, 0, 0x42, 0, 0, (0x100020, {24, 0, 0x42, 0, 0, "\??\C:\scripts\"}, 3, 33, ... 12, {status=0x0, info=1}, ) }, 3, 33, ... 12, {status=0x0, info=1}, ) == 0x0 00016 464 NtQueryVolumeInformationFile (12, 1243852, 8, Device, ... {status=0x0, info=8}, ) == 0x0 00017 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local"}, 1243804, ... ) }, 1243804, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00018 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "kernel32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00019 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c800000), 0x0, 1003520, ) == 0x0 00020 464 NtClose (16, ... ) == 0x0 00021 464 NtProtectVirtualMemory (-1, (0x7c801000), 1568, 4, ... (0x7c801000), 4096, 32, ) == 0x0 00022 464 NtProtectVirtualMemory (-1, (0x7c801000), 4096, 32, ... (0x7c801000), 4096, 4, ) == 0x0 00023 464 NtFlushInstructionCache (-1, 2088767488, 1568, ... ) == 0x0 00024 464 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00025 464 NtQuerySystemInformation (RangeStart, 4, ... {system info, class 50, size 4}, 0x0, ) == 0x0 00026 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00027 464 NtCreateSection (0xf001f, 0x0, {65536, 0}, 4, 67108864, 0, ... 16, ) == 0x0 00028 464 NtSecureConnectPort ( ("\Windows\ApiPort", {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) , {0, 2, 1, 1}, {24, 16, 0, 65536, 0, 0}, 1319736, {12, 0, 0}, 1241944, 44, ... 24, {24, 16, 0, 65536, 2424832, 18415616}, {0, 0, 0}, 200, 44, ) == 0x0 00029 464 NtClose (16, ... ) == 0x0 00030 464 NtQueryObject (24, Handle, 2, ... {Inherit=0,ProtectFromClose=0,}, -1, ) == 0x0 00031 464 NtSetInformationObject (24, Handle, {Inherit=0,ProtectFromClose=1,}, 256, ... ) == 0x0 00032 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00033 464 NtQueryVirtualMemory (-1, 0x250000, Basic, 28, ... {BaseAddress=0x250000,AllocationBase=0x250000,AllocationProtect=0x4,RegionSize=0x10000,State=0x2000,Protect=0x0,Type=0x40000,}, 0x0, ) == 0x0 00034 464 NtAllocateVirtualMemory (-1, 2424832, 0, 4096, 4096, 4, ... 2424832, 4096, ) == 0x0 00035 464 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 1036, 464, 57953, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ... {28, 56, reply, 0, 1036, 464, 57953, 0} (24, {28, 56, new_msg, 0, 1242260, 1242460, 2089900544, 1242184} "\210\6\31\1\0\0\0\0eZ\221|\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ... {28, 56, reply, 0, 1036, 464, 57953, 0} "`\375\27\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\234\6\31\1\4\0\0\0" ) ) == 0x0 00036 464 NtRegisterThreadTerminatePort (24, ... ) == 0x0 00037 464 NtAllocateVirtualMemory (-1, 1232896, 0, 4096, 4096, 260, ... 1232896, 4096, ) == 0x0 00038 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00039 464 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00040 464 NtClose (16, ... ) == 0x0 00041 464 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionUnicode"}, ... 16, ) }, ... 16, ) == 0x0 00042 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x260000), 0x0, 90112, ) == 0x0 00043 464 NtClose (16, ... ) == 0x0 00044 464 NtQueryDefaultLocale (0, 2089305000, ... ) == 0x0 00045 464 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionLocale"}, ... 16, ) }, ... 16, ) == 0x0 00046 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x280000), 0x0, 249856, ) == 0x0 00047 464 NtClose (16, ... ) == 0x0 00048 464 NtOpenSection (0x5, {24, 0, 0x40, 0, 0, (0x5, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey"}, ... 16, ) }, ... 16, ) == 0x0 00049 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x2c0000), 0x0, 266240, ) == 0x0 00050 464 NtQuerySection (16, Basic, 16, ... {BaseAddress=0x0,Attributes=0x800000,Size={0x40004, 0x0},}, 0x0, ) == 0x0 00051 464 NtClose (16, ... ) == 0x0 00052 464 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortTbls"}, ... 16, ) }, ... 16, ) == 0x0 00053 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x310000), 0x0, 24576, ) == 0x0 00054 464 NtClose (16, ... ) == 0x0 00055 464 NtQueryVirtualMemory (-1, 0x7ffd2000, Basic, 28, ... {BaseAddress=0x7ffd2000,AllocationBase=0x7ffb0000,AllocationProtect=0x2,RegionSize=0x2000,State=0x1000,Protect=0x2,Type=0x40000,}, 0x0, ) == 0x0 00056 464 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00057 464 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionSortkey00000409"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00058 464 NtAllocateVirtualMemory (-1, 2428928, 0, 8192, 4096, 4, ... 2428928, 8192, ) == 0x0 00059 464 NtRequestWaitReplyPort (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 1036, 464, 57954, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ... {24, 52, reply, 0, 1036, 464, 57954, 0} (24, {24, 52, new_msg, 0, 7012468, 7929957, 3145776, 3145776} "\210\6\31\1\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ... {24, 52, reply, 0, 1036, 464, 57954, 0} "\10P\30\0\36\0\1\0\0\0\0\0\377\377\377\377\234\6\31\1p\30\0\0" ) ) == 0x0 00060 464 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 1036, 464, 57955, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ... {28, 56, reply, 0, 1036, 464, 57955, 0} (24, {28, 56, new_msg, 0, 2089305760, 2090321376, 0, 0} "\210\6\31\1\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ... {28, 56, reply, 0, 1036, 464, 57955, 0} "\250\202\26\0\0\0\0\0\0\0\0\0\0\0\0\0\2\0\0\0\234\6\31\18\6\0\0" ) ) == 0x0 00061 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 128, ) == 0x0 00062 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 128, ... (0x46d000), 77824, 4, ) == 0x0 00063 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00064 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "user32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00065 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7e410000), 0x0, 589824, ) == 0x0 00066 464 NtClose (16, ... ) == 0x0 00067 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "GDI32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00068 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f10000), 0x0, 290816, ) == 0x0 00069 464 NtClose (16, ... ) == 0x0 00070 464 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00071 464 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00072 464 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00073 464 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00074 464 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00075 464 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00076 464 NtProtectVirtualMemory (-1, (0x77f11000), 508, 4, ... (0x77f11000), 4096, 32, ) == 0x0 00077 464 NtProtectVirtualMemory (-1, (0x77f11000), 4096, 32, ... (0x77f11000), 4096, 4, ) == 0x0 00078 464 NtFlushInstructionCache (-1, 2012286976, 508, ... ) == 0x0 00079 464 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00080 464 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00081 464 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00082 464 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00083 464 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00084 464 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00085 464 NtProtectVirtualMemory (-1, (0x7e411000), 1252, 4, ... (0x7e411000), 4096, 32, ) == 0x0 00086 464 NtProtectVirtualMemory (-1, (0x7e411000), 4096, 32, ... (0x7e411000), 4096, 4, ) == 0x0 00087 464 NtFlushInstructionCache (-1, 2118193152, 1252, ... ) == 0x0 00088 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00089 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00090 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00091 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "advapi32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00092 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77dd0000), 0x0, 634880, ) == 0x0 00093 464 NtClose (16, ... ) == 0x0 00094 464 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00095 464 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00096 464 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00097 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "RPCRT4.dll"}, ... 16, ) }, ... 16, ) == 0x0 00098 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77e70000), 0x0, 593920, ) == 0x0 00099 464 NtClose (16, ... ) == 0x0 00100 464 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00101 464 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00102 464 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00103 464 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00104 464 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00105 464 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00106 464 NtProtectVirtualMemory (-1, (0x77e71000), 868, 4, ... (0x77e71000), 4096, 32, ) == 0x0 00107 464 NtProtectVirtualMemory (-1, (0x77e71000), 4096, 32, ... (0x77e71000), 4096, 4, ) == 0x0 00108 464 NtFlushInstructionCache (-1, 2011631616, 868, ... ) == 0x0 00109 464 NtProtectVirtualMemory (-1, (0x77dd1000), 1700, 4, ... (0x77dd1000), 4096, 32, ) == 0x0 00110 464 NtProtectVirtualMemory (-1, (0x77dd1000), 4096, 32, ... (0x77dd1000), 4096, 4, ) == 0x0 00111 464 NtFlushInstructionCache (-1, 2010976256, 1700, ... ) == 0x0 00112 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00113 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00114 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00115 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "oleaut32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00116 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77120000), 0x0, 569344, ) == 0x0 00117 464 NtClose (16, ... ) == 0x0 00118 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00119 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00120 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00121 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00122 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00123 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00124 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00125 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00126 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00127 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "msvcrt.dll"}, ... 16, ) }, ... 16, ) == 0x0 00128 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77c10000), 0x0, 360448, ) == 0x0 00129 464 NtClose (16, ... ) == 0x0 00130 464 NtProtectVirtualMemory (-1, (0x77c11000), 632, 4, ... (0x77c11000), 4096, 32, ) == 0x0 00131 464 NtProtectVirtualMemory (-1, (0x77c11000), 4096, 32, ... (0x77c11000), 4096, 4, ) == 0x0 00132 464 NtFlushInstructionCache (-1, 2009141248, 632, ... ) == 0x0 00133 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00134 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00135 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00136 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ole32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00137 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x774e0000), 0x0, 1298432, ) == 0x0 00138 464 NtClose (16, ... ) == 0x0 00139 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00140 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00141 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00142 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00143 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00144 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00145 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00146 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00147 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00148 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00149 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00150 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00151 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00152 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00153 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00154 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00155 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00156 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00157 464 NtProtectVirtualMemory (-1, (0x774e1000), 2352, 4, ... (0x774e1000), 4096, 32, ) == 0x0 00158 464 NtProtectVirtualMemory (-1, (0x774e1000), 4096, 32, ... (0x774e1000), 4096, 4, ) == 0x0 00159 464 NtFlushInstructionCache (-1, 2001604608, 2352, ... ) == 0x0 00160 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00161 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00162 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00163 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00164 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00165 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00166 464 NtProtectVirtualMemory (-1, (0x77121000), 1272, 4, ... (0x77121000), 4096, 32, ) == 0x0 00167 464 NtProtectVirtualMemory (-1, (0x77121000), 4096, 32, ... (0x77121000), 4096, 4, ) == 0x0 00168 464 NtFlushInstructionCache (-1, 1997672448, 1272, ... ) == 0x0 00169 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00170 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00171 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00172 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00173 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00174 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00175 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "shell32.dll"}, ... 16, ) }, ... 16, ) == 0x0 00176 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x7c9c0000), 0x0, 8482816, ) == 0x0 00177 464 NtClose (16, ... ) == 0x0 00178 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00179 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00180 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00181 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00182 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00183 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00184 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00185 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00186 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00187 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00188 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00189 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00190 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00191 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00192 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00193 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00194 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00195 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00196 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "SHLWAPI.dll"}, ... 16, ) }, ... 16, ) == 0x0 00197 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x77f60000), 0x0, 483328, ) == 0x0 00198 464 NtClose (16, ... ) == 0x0 00199 464 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00200 464 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00201 464 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00202 464 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00203 464 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00204 464 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00205 464 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00206 464 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00207 464 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00208 464 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00209 464 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00210 464 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00211 464 NtProtectVirtualMemory (-1, (0x77f61000), 2076, 4, ... (0x77f61000), 4096, 32, ) == 0x0 00212 464 NtProtectVirtualMemory (-1, (0x77f61000), 4096, 32, ... (0x77f61000), 4096, 4, ) == 0x0 00213 464 NtFlushInstructionCache (-1, 2012614656, 2076, ... ) == 0x0 00214 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00215 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00216 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00217 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 4476, 4, ... (0x7c9c1000), 8192, 32, ) == 0x0 00218 464 NtProtectVirtualMemory (-1, (0x7c9c1000), 8192, 32, ... (0x7c9c1000), 8192, 4, ) == 0x0 00219 464 NtFlushInstructionCache (-1, 2090602496, 4476, ... ) == 0x0 00220 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00221 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00222 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00223 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00224 464 NtAllocateVirtualMemory (-1, 1323008, 0, 4096, 4096, 4, ... 1323008, 4096, ) == 0x0 00225 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00226 464 NtFsControlFile (12, 0, 0x0, 0x0, 0x90028, 0x0, 0, 0, ... {status=0x0, info=0}, 0x0, ) == 0x0 00227 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 1242572, ... ) }, 1242572, ... ) == 0x0 00228 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\ws2_32.dll"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00229 464 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00230 464 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00231 464 NtOpenProcessToken (-1, 0x8, ... 32, ) == 0x0 00232 464 NtQueryInformationToken (32, User, 136, ... {token info, class 1, size 36}, 36, ) == 0x0 00233 464 NtOpenKey (0x3, {24, 0, 0x40, 0, 0, (0x3, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\SafeBoot\Option"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00234 464 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... 36, ) }, ... 36, ) == 0x0 00235 464 NtQueryValueKey (36, (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) , Partial, 80, ... TitleIdx=0, Type=4, Data= (36, "TransparentEnabled", Partial, 80, ... TitleIdx=0, Type=4, Data="\1\0\0\0"}, 16, ) }, 16, ) == 0x0 00236 464 NtClose (36, ... ) == 0x0 00237 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00238 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 36, ) == 0x0 00239 464 NtQueryInformationToken (36, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00240 464 NtClose (36, ... ) == 0x0 00241 464 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00242 464 NtClose (32, ... ) == 0x0 00243 464 NtClose (16, ... ) == 0x0 00244 464 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71ab0000), 0x0, 94208, ) == 0x0 00245 464 NtClose (28, ... ) == 0x0 00246 464 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00247 464 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00248 464 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00249 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00250 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00251 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 1241756, ... ) }, 1241756, ... ) == 0x0 00252 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\WS2HELP.dll"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00253 464 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 28, ... 16, ) == 0x0 00254 464 NtQuerySection (16, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00255 464 NtClose (28, ... ) == 0x0 00256 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x71aa0000), 0x0, 32768, ) == 0x0 00257 464 NtClose (16, ... ) == 0x0 00258 464 NtProtectVirtualMemory (-1, (0x71aa1000), 352, 4, ... (0x71aa1000), 4096, 32, ) == 0x0 00259 464 NtProtectVirtualMemory (-1, (0x71aa1000), 4096, 32, ... (0x71aa1000), 4096, 4, ) == 0x0 00260 464 NtFlushInstructionCache (-1, 1906970624, 352, ... ) == 0x0 00261 464 NtProtectVirtualMemory (-1, (0x71ab1000), 468, 4, ... (0x71ab1000), 4096, 32, ) == 0x0 00262 464 NtProtectVirtualMemory (-1, (0x71ab1000), 4096, 32, ... (0x71ab1000), 4096, 4, ) == 0x0 00263 464 NtFlushInstructionCache (-1, 1907036160, 468, ... ) == 0x0 00264 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 4, ... (0x46d000), 77824, 64, ) == 0x0 00265 464 NtProtectVirtualMemory (-1, (0x46d000), 77824, 64, ... (0x46d000), 77824, 4, ) == 0x0 00266 464 NtFlushInstructionCache (-1, 4640768, 77824, ... ) == 0x0 00267 464 NtQueryInformationProcess (-1, 37, 48, ... {process info, class 37, size 48}, 0x0, ) == 0x0 00268 464 NtSetInformationProcess (-1, 34, {process info, class 34, size 4}, 4, ... ) == 0x0 00269 464 NtOpenProcessToken (-1, 0x8, ... 16, ) == 0x0 00270 464 NtQueryInformationToken (16, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00271 464 NtClose (16, ... ) == 0x0 00272 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 16, ) }, ... 16, ) == 0x0 00273 464 NtQueryValueKey (16, (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (16, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00274 464 NtClose (16, ... ) == 0x0 00275 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00276 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00277 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00278 464 NtRequestWaitReplyPort (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 1036, 464, 57956, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ... {28, 56, reply, 0, 1036, 464, 57956, 0} (24, {28, 56, new_msg, 0, 0, 1242384, 0, 1242028} "\210\6\31\1\0\0\0\0\344\0\23\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ... {28, 56, reply, 0, 1036, 464, 57956, 0} "\320G\26\0\0\0\0\0\0\0\0\0\4\0\0\0\3\0\0\0\234\6\31\1$\1\0\0" ) ) == 0x0 00279 464 NtOpenKey (0x1, {24, 0, 0x40, 0, 0, (0x1, {24, 0, 0x40, 0, 0, "\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager"}, ... 16, ) }, ... 16, ) == 0x0 00280 464 NtQueryValueKey (16, (16, "SafeDllSearchMode", Partial, 16, ... ) , Partial, 16, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00281 464 NtClose (16, ... ) == 0x0 00282 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239420, ... ) }, 1239420, ... ) == 0x0 00283 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00284 464 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 16, ... 28, ) == 0x0 00285 464 NtClose (16, ... ) == 0x0 00286 464 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00287 464 NtClose (28, ... ) == 0x0 00288 464 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00289 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239328, ... ) }, 1239328, ... ) == 0x0 00290 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 28, {status=0x0, info=1}, ) }, 5, 96, ... 28, {status=0x0, info=1}, ) == 0x0 00291 464 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 28, ... 16, ) == 0x0 00292 464 NtClose (28, ... ) == 0x0 00293 464 NtMapViewOfSection (16, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x480000), 0x0, 110592, ) == 0x0 00294 464 NtClose (16, ... ) == 0x0 00295 464 NtUnmapViewOfSection (-1, 0x480000, ... ) == 0x0 00296 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239636, ... ) }, 1239636, ... ) == 0x0 00297 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 5, 96, ... 16, {status=0x0, info=1}, ) }, 5, 96, ... 16, {status=0x0, info=1}, ) == 0x0 00298 464 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 16, ... 28, ) == 0x0 00299 464 NtQuerySection (28, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00300 464 NtClose (16, ... ) == 0x0 00301 464 NtMapViewOfSection (28, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x76390000), 0x0, 118784, ) == 0x0 00302 464 NtClose (28, ... ) == 0x0 00303 464 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00304 464 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00305 464 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00306 464 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00307 464 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00308 464 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00309 464 NtProtectVirtualMemory (-1, (0x76391000), 696, 4, ... (0x76391000), 4096, 32, ) == 0x0 00310 464 NtProtectVirtualMemory (-1, (0x76391000), 4096, 32, ... (0x76391000), 4096, 4, ) == 0x0 00311 464 NtFlushInstructionCache (-1, 1983451136, 696, ... ) == 0x0 00312 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00313 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00314 464 NtAllocateVirtualMemory (-1, 1228800, 0, 4096, 4096, 260, ... 1228800, 4096, ) == 0x0 00315 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1236552, ... ) }, 1236552, ... ) == 0x0 00316 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00317 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00318 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00319 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00320 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00321 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00322 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00323 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00324 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00325 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00326 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ws2_32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00327 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\IMM32.DLL"}, 1239956, ... ) }, 1239956, ... ) == 0x0 00328 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Error Message Instrument\"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00329 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize"}, ... 28, ) }, ... 28, ) == 0x0 00330 464 NtQueryValueKey (28, (28, "DisableMetaFiles", Partial, 20, ... ) , Partial, 20, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00331 464 NtClose (28, ... ) == 0x0 00332 464 NtMapViewOfSection (-2147482740, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x480000), 0x0, 1060864, ) == 0x0 00333 464 NtClose (-2147482740, ... ) == 0x0 00334 464 NtCreateEvent (0x1f0003, 0x0, 1, 0, ... 28, ) == 0x0 00335 464 NtOpenThreadTokenEx (-2, 0x8, 1, 512, ... ) == STATUS_NO_TOKEN 00336 464 NtOpenProcessTokenEx (-1, 0x8, 512, ... -2147482740, ) == 0x0 00337 464 NtQueryInformationToken (-2147482740, Statistics, 0, ... ) == STATUS_BUFFER_TOO_SMALL 00338 464 NtQueryInformationToken (-2147482740, Statistics, 56, ... {token info, class 10, size 56}, 56, ) == 0x0 00339 464 NtClose (-2147482740, ... ) == 0x0 00340 464 NtAllocateVirtualMemory (-1, 0, 0, 32, 4096, 4, ... 4128768, 4096, ) == 0x0 00341 464 NtFreeVirtualMemory (-1, (0x3f0000), 4096, 32768, ... (0x3f0000), 4096, ) == 0x0 00342 464 NtDuplicateObject (-1, 16, -1, 0x0, 0, 2, ... 36, ) == 0x0 00343 464 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00344 464 NtQueryValueKey (-2147482740, (-2147482740, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00345 464 NtClose (-2147482740, ... ) == 0x0 00346 464 NtOpenKey (0x20019, {24, 0, 0x240, 0, 0, (0x20019, {24, 0, 0x240, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00347 464 NtQueryValueKey (-2147482740, (-2147482740, "packed", Partial, 172, ... ) , Partial, 172, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00348 464 NtClose (-2147482740, ... ) == 0x0 00349 464 NtQueryDefaultLocale (0, -139609780, ... ) == 0x0 00350 464 NtGdiQueryFontAssocInfo (0, ... ) == 0x0 00351 464 NtUserCallNoParam (24, ... ) == 0x0 00352 464 NtGdiCreateCompatibleDC (0, ... 00353 464 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 4128768, 4096, ) == 0x0 00352 464 NtGdiCreateCompatibleDC ... ) == 0xee0105b0 00354 464 NtGdiGetStockObject (0, ... ) == 0x1900010 00355 464 NtGdiGetStockObject (4, ... ) == 0x1900011 00356 464 NtGdiCreateBitmap (8, 8, 1, 1, 2118200212, ... ) == 0x76050581 00357 464 NtGdiCreateSolidBrush (0, 0, ... 00358 464 NtAllocateVirtualMemory (-1, 0, 0, 4096, 12288, 4, ... 8978432, 4096, ) == 0x0 00357 464 NtGdiCreateSolidBrush ... ) == 0xa51003d2 00359 464 NtGdiGetStockObject (13, ... ) == 0x18a0021 00360 464 NtGdiCreateCompatibleDC (0, ... ) == 0x5201039b 00361 464 NtGdiSelectBitmap (1375798171, 1980040577, ... ) == 0x185000f 00362 464 NtUserGetThreadDesktop (464, 0, ... ) == 0x20 00363 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows"}, ... 40, ) }, ... 40, ) == 0x0 00364 464 NtQueryValueKey (40, (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) , Partial, 64, ... TitleIdx=0, Type=1, Data= (40, "AppInit_DLLs", Partial, 64, ... TitleIdx=0, Type=1, Data="\0\0"}, 14, ) }, 14, ) == 0x0 00365 464 NtClose (40, ... ) == 0x0 00366 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00367 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 673, 128, 0, ... ) == 0x81b1c017 00368 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00369 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 674, 128, 0, ... ) == 0x81b1c01c 00370 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00371 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 675, 128, 0, ... ) == 0x81b1c01e 00372 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00373 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 676, 128, 0, ... ) == 0x81b18002 00374 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10013 00375 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 677, 128, 0, ... ) == 0x81b1c018 00376 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00377 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 678, 128, 0, ... ) == 0x81b1c01a 00378 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00379 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 679, 128, 0, ... ) == 0x81b1c01d 00380 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00381 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 681, 128, 0, ... ) == 0x81b1c026 00382 464 NtUserFindExistingCursorIcon (1241132, 1241148, 1241196, ... ) == 0x10011 00383 464 NtUserRegisterClassExWOW (1241144, 1241212, 1241228, 1241244, 680, 128, 0, ... ) == 0x81b1c019 00384 464 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x81b1c020 00385 464 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x81b1c022 00386 464 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x81b1c023 00387 464 NtUserRegisterClassExWOW (1241352, 1241448, 1241432, 1241420, 0, 130, 0, ... ) == 0x81b1c024 00388 464 NtUserRegisterClassExWOW (1241096, 1241164, 1241180, 1241196, 0, 128, 0, ... ) == 0x81b1c025 00389 464 NtCallbackReturn (0, 0, 0, ... 00390 464 NtGdiInit (... ) == 0x1 00391 464 NtGdiGetStockObject (18, ... ) == 0x290001c 00392 464 NtGdiGetStockObject (19, ... ) == 0x1b00019 00393 464 NtAllocateVirtualMemory (-1, 1327104, 0, 4096, 4096, 4, ... 1327104, 4096, ) == 0x0 00394 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\System\CurrentControlSet\Control\Terminal Server"}, ... 40, ) }, ... 40, ) == 0x0 00395 464 NtQueryValueKey (40, (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSAppCompat", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00396 464 NtQueryValueKey (40, (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 548, ... TitleIdx=0, Type=4, Data= (40, "TSUserEnabled", Partial, 548, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00397 464 NtClose (40, ... ) == 0x0 00398 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"}, ... 40, ) }, ... 40, ) == 0x0 00399 464 NtQueryValueKey (40, (40, "LeakTrack", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00400 464 NtClose (40, ... ) == 0x0 00401 464 NtOpenKey (0x2000000, {24, 0, 0x40, 0, 0, (0x2000000, {24, 0, 0x40, 0, 0, "\REGISTRY\MACHINE"}, ... 40, ) }, ... 40, ) == 0x0 00402 464 NtSetInformationObject (40, Handle, {Inherit=0,ProtectFromClose=1,}, 2011431168, ... ) == 0x0 00403 464 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\Diagnostics"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00404 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00405 464 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9043968, 65536, ) == 0x0 00406 464 NtAllocateVirtualMemory (-1, 9043968, 0, 4096, 4096, 4, ... 9043968, 4096, ) == 0x0 00407 464 NtAllocateVirtualMemory (-1, 9048064, 0, 8192, 4096, 4, ... 9048064, 8192, ) == 0x0 00408 464 NtAllocateVirtualMemory (-1, 9056256, 0, 4096, 4096, 4, ... 9056256, 4096, ) == 0x0 00409 464 NtOpenSection (0x4, {24, 0, 0x40, 0, 0, (0x4, {24, 0, 0x40, 0, 0, "\NLS\NlsSectionCType"}, ... 44, ) }, ... 44, ) == 0x0 00410 464 NtMapViewOfSection (44, -1, (0x0), 0, 0, 0x0, 0, 2, 0, 2, ... (0x8b0000), 0x0, 12288, ) == 0x0 00411 464 NtClose (44, ... ) == 0x0 00412 464 NtAllocateVirtualMemory (-1, 9060352, 0, 4096, 4096, 4, ... 9060352, 4096, ) == 0x0 00413 464 NtQueryVirtualMemory (-1, 0x77c2807c, Basic, 28, ... {BaseAddress=0x77c28000,AllocationBase=0x77c10000,AllocationProtect=0x80,RegionSize=0x35000,State=0x1000,Protect=0x20,Type=0x1000000,}, 28, ) == 0x0 00414 464 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00415 464 NtQueryInformationProcess (-1, 36, 4, ... {process info, class 36, size 4}, 0x0, ) == 0x0 00416 464 NtQueryVirtualMemory (-1, 0x0, Basic, 28, ... {BaseAddress=0x0,AllocationBase=0x0,AllocationProtect=0x0,RegionSize=0x10000,State=0x10000,Protect=0x1,Type=0x0,}, 28, ) == 0x0 00417 464 NtAllocateVirtualMemory (-1, 1331200, 0, 4096, 4096, 4, ... 1331200, 4096, ) == 0x0 00418 464 NtOpenFile (0x100001, {24, 0, 0x40, 0, 0, (0x100001, {24, 0, 0x40, 0, 0, "\Device\KsecDD"}, 7, 16, ... 44, {status=0x0, info=0}, ) }, 7, 16, ... 44, {status=0x0, info=0}, ) == 0x0 00419 464 NtDeviceIoControlFile (44, 0, 0x0, 0x0, 0x390008, (44, 0, 0x0, 0x0, 0x390008, "\227k\232k\374/\370\227\200$U\14\21M:\235\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 256, 256, ... , 256, 256, ... 00420 464 NtQuerySystemInformation (TimeOfDay, 48, ... {system info, class 3, size 48}, 48, ) == 0x0 00421 464 NtQuerySystemInformation (ProcessorTimes, 48, ... {system info, class 8, size 48}, 48, ) == 0x0 00422 464 NtQuerySystemInformation (Performance, 312, ... {system info, class 2, size 312}, 312, ) == 0x0 00423 464 NtQuerySystemInformation (Exception, 16, ... {system info, class 33, size 16}, 16, ) == 0x0 00424 464 NtQuerySystemInformation (Lookaside, 32, ... {system info, class 45, size 32}, 32, ) == 0x0 00425 464 NtQuerySystemInformation (ProcessorStatistics, 3016, ... {system info, class 23, size 0}, 0, ) == 0x0 00426 464 NtQuerySystemInformation (ProcessesAndThreads, 3008, ... ) == STATUS_INFO_LENGTH_MISMATCH 00427 464 NtCreateKey (0x2, {24, 0, 0x240, 0, 0, (0x2, {24, 0, 0x240, 0, 0, "\Registry\Machine\SOFTWARE\Microsoft\Cryptography\RNG"}, 0, 0x0, 0, ... -2147482740, 2, ) }, 0, 0x0, 0, ... -2147482740, 2, ) == 0x0 00428 464 NtSetValueKey (-2147482740, (-2147482740, "Seed", 0, 3, "\353N\234\7eT\242\110\25\35\263\211\370\362)\201\202BT\275Z4x\37Y\33\373\226D\24e\253\27iD`\255w\270\177[\321\325g6\272&\4\21\353S\260h\254\373\224iLU#\221\5*\330'\314\255\266\3;\303=1I)\354N\227\277", 80, ... ) , 0, 3, (-2147482740, "Seed", 0, 3, "\353N\234\7eT\242\110\25\35\263\211\370\362)\201\202BT\275Z4x\37Y\33\373\226D\24e\253\27iD`\255w\270\177[\321\325g6\272&\4\21\353S\260h\254\373\224iLU#\221\5*\330'\314\255\266\3;\303=1I)\354N\227\277", 80, ... ) , 80, ... ) == 0x0 00429 464 NtClose (-2147482740, ... ) == 0x0 00419 464 NtDeviceIoControlFile ... {status=0x0, info=256}, ... {status=0x0, info=256}, "\255\377!\213~R,\324\2701"\220\13,T\224\373p\35/\352L#\212is\230\250\4\265\206\265\17\343\16)\2502{\232&1]7\331|\341\1\301R\372\360W\347z\3016\3\377\227\362l\204\271\304*\313\243W`\302'\242\226\307\31\213/\217SYk\7w\30\254t2F\313\3\27m\12\357\2A=\312\375Sw\262\243\344\254%3\jH\235\12M\355\320\313\20Gq\256A50\376mV%\177=\307^\245b\360\341\315J\254h\26\321'\332|\256\357\300\255\2635\242\350\252\252\272\327\254\331t\25\353?<>\326\206\227c\213\236\266\333\11D\350-\303\204a\}\263\306\340&\213\13\3318\371\334\3569\370{\6I&\336vy]\3036Y\15Je\260\213\224\355R\24\3724\305\253M\377p\30\226\2054k\2248Q\4M\334@\223\272\304V\225\302\215Z\360\23o\3700\340t\350\330%r&\275", ) \220\13,T\224\373p\35/\352L#\212is\230\250\4\265\206\265\17\343\16)\2502{\232&1]7\331|\341\1\301R\372\360W\347z\3016\3\377\227\362l\204\271\304*\313\243W`\302'\242\226\307\31\213/\217SYk\7w\30\254t2F\313\3\27m\12\357\2A=\312\375Sw\262\243\344\254%3\jH\235\12M\355\320\313\20Gq\256A50\376mV%\177=\307^\245b\360\341\315J\254h\26\321'\332|\256\357\300\255\2635\242\350\252\252\272\327\254\331t\25\353?<>\326\206\227c\213\236\266\333\11D\350-\303\204a\}\263\306\340&\213\13\3318\371\334\3569\370{\6I&\336vy]\3036Y\15Je\260\213\224\355R\24\3724\305\253M\377p\30\226\2054k\2248Q\4M\334@\223\272\304V\225\302\215Z\360\23o\3700\340t\350\330%r&\275", ) == 0x0 00430 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00431 464 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00432 464 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "SYSTEM\CurrentControlSet\Control\Session Manager"}, ... 48, ) }, ... 48, ) == 0x0 00433 464 NtQueryValueKey (48, (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (48, "CriticalSectionTimeout", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\215'\0"}, 16, ) }, 16, ) == 0x0 00434 464 NtClose (48, ... ) == 0x0 00435 464 NtOpenKey (0x20019, {24, 40, 0x40, 0, 0, (0x20019, {24, 40, 0x40, 0, 0, "Software\Microsoft\Ole"}, ... 48, ) }, ... 48, ) == 0x0 00436 464 NtQueryValueKey (48, (48, "RWLockResourceTimeOut", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00437 464 NtClose (48, ... ) == 0x0 00438 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00439 464 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00440 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00441 464 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00442 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface"}, ... 48, ) }, ... 48, ) == 0x0 00443 464 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00444 464 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00445 464 NtQueryValueKey (48, (48, "InterfaceHelperDisableTypeLib", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00446 464 NtClose (48, ... ) == 0x0 00447 464 NtOpenKey (0x20019, {24, 0, 0x40, 0, 0, (0x20019, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Classes\Interface\{00020400-0000-0000-C000-000000000046}"}, ... 48, ) }, ... 48, ) == 0x0 00448 464 NtQueryValueKey (48, (48, "InterfaceHelperDisableAll", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00449 464 NtQueryValueKey (48, (48, "InterfaceHelperDisableAllForOle32", Full, 0, ... ) , Full, 0, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00450 464 NtClose (48, ... ) == 0x0 00451 464 NtOpenDirectoryObject (0x2000f, {24, 0, 0x40, 0, 0, (0x2000f, {24, 0, 0x40, 0, 0, "\BaseNamedObjects"}, ... 48, ) }, ... 48, ) == 0x0 00452 464 NtOpenEvent (0x1f0003, {24, 48, 0x0, 0, 0, (0x1f0003, {24, 48, 0x0, 0, 0, "HookSwitchHookEnabledEvent"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00453 464 NtUserRegisterWindowMessage ( ("{FB8F0821-0164-101B-84ED-08002B2EC713}", ... ) , ... ) == 0xc077 00454 464 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00455 464 NtOpenKey (0x9, {24, 40, 0x40, 0, 0, (0x9, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT\UserEra"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00456 464 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SOFTWARE\Microsoft\OLEAUT"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00457 464 NtOpenKey (0x2000000, {24, 40, 0x40, 0, 0, (0x2000000, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows\CurrentVersion\Explorer\Performance"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00458 464 NtCreateSemaphore (0x1f0003, {24, 48, 0x80, 1333696, 0, (0x1f0003, {24, 48, 0x80, 1333696, 0, "shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}"}, 0, 2147483647, ... 52, ) }, 0, 2147483647, ... 52, ) == STATUS_OBJECT_NAME_EXISTS 00459 464 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "SYSTEM\Setup"}, ... 56, ) }, ... 56, ) == 0x0 00460 464 NtQueryValueKey (56, (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) , Partial, 144, ... TitleIdx=0, Type=4, Data= (56, "SystemSetupInProgress", Partial, 144, ... TitleIdx=0, Type=4, Data="\0\0\0\0"}, 16, ) }, 16, ) == 0x0 00461 464 NtClose (56, ... ) == 0x0 00462 464 NtQueryDefaultUILanguage (1241692, ... 00463 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00464 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482740, ) == 0x0 00465 464 NtQueryInformationToken (-2147482740, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00466 464 NtClose (-2147482740, ... ) == 0x0 00467 464 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00468 464 NtOpenKey (0x80000000, {24, -2147482740, 0x240, 0, 0, (0x80000000, {24, -2147482740, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00469 464 NtOpenKey (0x80000000, {24, -2147482740, 0x640, 0, 0, (0x80000000, {24, -2147482740, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481328, ) }, ... -2147481328, ) == 0x0 00470 464 NtQueryValueKey (-2147481328, (-2147481328, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00471 464 NtClose (-2147481328, ... ) == 0x0 00472 464 NtClose (-2147482740, ... ) == 0x0 00462 464 NtQueryDefaultUILanguage ... ) == 0x0 00473 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00474 464 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 60, ) == 0x0 00475 464 NtMapViewOfSection (60, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 8462336, ) == 0x0 00476 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00477 464 NtQueryDefaultUILanguage (2090319928, ... 00478 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00479 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482740, ) == 0x0 00480 464 NtQueryInformationToken (-2147482740, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00481 464 NtClose (-2147482740, ... ) == 0x0 00482 464 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00483 464 NtOpenKey (0x80000000, {24, -2147482740, 0x240, 0, 0, (0x80000000, {24, -2147482740, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00484 464 NtOpenKey (0x80000000, {24, -2147482740, 0x640, 0, 0, (0x80000000, {24, -2147482740, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481328, ) }, ... -2147481328, ) == 0x0 00485 464 NtQueryValueKey (-2147481328, (-2147481328, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00486 464 NtClose (-2147481328, ... ) == 0x0 00487 464 NtClose (-2147482740, ... ) == 0x0 00477 464 NtQueryDefaultUILanguage ... ) == 0x0 00488 464 NtQueryInstallUILanguage (2090319930, ... ) == 0x0 00489 464 NtQueryDefaultLocale (1, 1239788, ... ) == 0x0 00490 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\shell32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00491 464 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1036, 464, 57964, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1036, 464, 57964, 0} (24, {128, 156, new_msg, 0, 2088850039, 1240824, 1179817, 1240548} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ... {128, 156, reply, 0, 1036, 464, 57964, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0>\0@\0\250\6\31\18\0\0\0\377\377\377\377\0\0\0\0@ \257\0\0\0\0\0\236\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\350\6\31\1\0\0\0\0\0\0\0\0\354\362\22\0\0\0\0\0" ) ) == 0x0 00492 464 NtClose (56, ... ) == 0x0 00493 464 NtClose (60, ... ) == 0x0 00494 464 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00495 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00496 464 NtAllocateVirtualMemory (-1, 1335296, 0, 4096, 4096, 4, ... 1335296, 4096, ) == 0x0 00497 464 NtOpenKey (0x8, {24, 0, 0x40, 0, 0, (0x8, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00498 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00499 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00500 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\u:\work\packed.exe.Local\"}, 1238980, ... ) }, 1238980, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00501 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00502 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00503 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00504 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 1239044, ... ) }, 1239044, ... ) == 0x0 00505 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03"}, 3, 33, ... 60, {status=0x0, info=1}, ) }, 3, 33, ... 60, {status=0x0, info=1}, ) == 0x0 00506 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00507 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00508 464 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00509 464 NtClose (56, ... ) == 0x0 00510 464 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 1056768, ) == 0x0 00511 464 NtClose (64, ... ) == 0x0 00512 464 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00513 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll"}, 5, 96, ... 64, {status=0x0, info=1}, ) }, 5, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00514 464 NtCreateSection (0xf, 0x0, 0x0, 16, 16777216, 64, ... 56, ) == 0x0 00515 464 NtQuerySection (56, Image, 48, ... {section info, class 1, size 48}, 0x0, ) == 0x0 00516 464 NtClose (64, ... ) == 0x0 00517 464 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x773d0000), 0x0, 1060864, ) == 0x0 00518 464 NtClose (56, ... ) == 0x0 00519 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00520 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00521 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00522 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00523 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00524 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00525 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00526 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00527 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00528 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00529 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00530 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00531 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00532 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00533 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00534 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00535 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00536 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00537 464 NtProtectVirtualMemory (-1, (0x773d1000), 1924, 4, ... (0x773d1000), 4096, 32, ) == 0x0 00538 464 NtProtectVirtualMemory (-1, (0x773d1000), 4096, 32, ... (0x773d1000), 4096, 4, ) == 0x0 00539 464 NtFlushInstructionCache (-1, 2000490496, 1924, ... ) == 0x0 00540 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00541 464 NtAddAtom ( ("T\0h\0e\0m\0e\0P\0r\0o\0p\0S\0c\0r\0o\0l\0l\0B\0a\0r\0C\0t\0l\0", 42, 1240524, ... ) , 42, 1240524, ... ) == 0x0 00542 464 NtQueryDefaultUILanguage (1239208, ... 00543 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00544 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482740, ) == 0x0 00545 464 NtQueryInformationToken (-2147482740, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00546 464 NtClose (-2147482740, ... ) == 0x0 00547 464 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00548 464 NtOpenKey (0x80000000, {24, -2147482740, 0x240, 0, 0, (0x80000000, {24, -2147482740, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00549 464 NtOpenKey (0x80000000, {24, -2147482740, 0x640, 0, 0, (0x80000000, {24, -2147482740, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481328, ) }, ... -2147481328, ) == 0x0 00550 464 NtQueryValueKey (-2147481328, (-2147481328, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00551 464 NtClose (-2147481328, ... ) == 0x0 00552 464 NtClose (-2147482740, ... ) == 0x0 00542 464 NtQueryDefaultUILanguage ... ) == 0x0 00553 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1238048, ... ) }, 1238048, ... ) == 0x0 00554 464 NtOpenFile (0x100020, {24, 0, 0x40, 0, 0, (0x100020, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 5, 96, ... 56, {status=0x0, info=1}, ) }, 5, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00555 464 NtCreateSection (0xe, 0x0, 0x0, 16, 134217728, 56, ... 64, ) == 0x0 00556 464 NtClose (56, ... ) == 0x0 00557 464 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 16, ... (0x8c0000), 0x0, 4096, ) == 0x0 00558 464 NtClose (64, ... ) == 0x0 00559 464 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00560 464 NtQueryAttributesFile ({24, 0, 0x40, 0, 0, ({24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1237644, ... ) }, 1237644, ... ) == 0x0 00561 464 NtCreateFile (0x80100080, {24, 0, 0x40, 0, 1238388, (0x80100080, {24, 0, 0x40, 0, 1238388, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) }, 0x0, 0, 5, 1, 96, 0, 0, ... 64, {status=0x0, info=1}, ) == 0x0 00562 464 NtCreateSection (0xf0005, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00563 464 NtClose (64, ... ) == 0x0 00564 464 NtMapViewOfSection (56, -1, (0x0), 0, 0, {0, 0}, 0, 1, 0, 2, ... (0x8c0000), {0, 0}, 4096, ) == 0x0 00565 464 NtClose (56, ... ) == 0x0 00566 464 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00567 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Manifest"}, 1, 96, ... 56, {status=0x0, info=1}, ) }, 1, 96, ... 56, {status=0x0, info=1}, ) == 0x0 00568 464 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 56, ... 64, ) == 0x0 00569 464 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8c0000), 0x0, 4096, ) == 0x0 00570 464 NtQueryInformationFile (56, 1238040, 24, Standard, ... {status=0x0, info=24}, ) == 0x0 00571 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\WindowsShell.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00572 464 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1036, 464, 57965, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1036, 464, 57965, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238340, 1179817, 1238064} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ... {128, 156, reply, 0, 1036, 464, 57965, 0} "\260d\27\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\3\0@\0D\0\250\6\31\18\0\0\0@\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\355\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\26\0\30\0\354\6\31\1\0\0\0\0\0\0\0\08\351\22\0\0\0\0\0" ) ) == 0x0 00573 464 NtClose (56, ... ) == 0x0 00574 464 NtClose (64, ... ) == 0x0 00575 464 NtUnmapViewOfSection (-1, 0x8c0000, ... ) == 0x0 00576 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00577 464 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00578 464 NtUserSystemParametersInfo (104, 0, 2001084812, 0, ... ) == 0x1 00579 464 NtUserGetDC (0, ... ) == 0x1010051 00580 464 NtUserCallOneParam (16842833, 57, ... ) == 0x1 00581 464 NtUserSystemParametersInfo (38, 4, 2001086940, 0, ... ) == 0x1 00582 464 NtUserSystemParametersInfo (66, 12, 1240040, 0, ... ) == 0x1 00583 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00584 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 64, ) == 0x0 00585 464 NtQueryInformationToken (64, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00586 464 NtClose (64, ... ) == 0x0 00587 464 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 64, ) }, ... 64, ) == 0x0 00588 464 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00589 464 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00590 464 NtClose (56, ... ) == 0x0 00591 464 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "Control Panel\Desktop"}, ... 56, ) }, ... 56, ) == 0x0 00592 464 NtQueryValueKey (56, (56, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00593 464 NtClose (56, ... ) == 0x0 00594 464 NtUserSystemParametersInfo (41, 500, 1240068, 0, ... ) == 0x1 00595 464 NtOpenProcessToken (-1, 0x8, ... 56, ) == 0x0 00596 464 NtAccessCheck (1332816, 56, 0x1, 1239872, 1239924, 56, 1239904, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00597 464 NtClose (56, ... ) == 0x0 00598 464 NtOpenKey (0x20019, {24, 64, 0x40, 0, 0, (0x20019, {24, 64, 0x40, 0, 0, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"}, ... 56, ) }, ... 56, ) == 0x0 00599 464 NtQueryValueKey (56, (56, "EnableBalloonTips", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00600 464 NtClose (56, ... ) == 0x0 00601 464 NtUserSystemParametersInfo (27, 0, 2001085788, 0, ... ) == 0x1 00602 464 NtUserSystemParametersInfo (102, 0, 2001086828, 0, ... ) == 0x1 00603 464 NtClose (64, ... ) == 0x0 00604 464 NtUserSystemParametersInfo (4130, 0, 1240572, 0, ... ) == 0x1 00605 464 NtOpenKey (0x1, {24, 40, 0x40, 0, 0, (0x1, {24, 40, 0x40, 0, 0, "Software\Microsoft\Windows NT\CurrentVersion\LanguagePack"}, ... 64, ) }, ... 64, ) == 0x0 00606 464 NtEnumerateValueKey (64, 0, Full, 220, ... ) == STATUS_NO_MORE_ENTRIES 00607 464 NtClose (64, ... ) == 0x0 00608 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00609 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c03b 00610 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c03d 00611 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00612 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c03f 00613 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00614 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c041 00615 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00616 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c043 00617 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c045 00618 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00619 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c047 00620 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00621 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c049 00622 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00623 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c04b 00624 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00625 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c04d 00626 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00627 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c04f 00628 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c051 00629 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00630 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c053 00631 464 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00632 464 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x81b1c055 00633 464 NtUserFindExistingCursorIcon (1239816, 1239832, 1239880, ... ) == 0x10011 00634 464 NtUserRegisterClassExWOW (1239760, 1239828, 1239844, 1239860, 0, 384, 0, ... ) == 0x81b1c057 00635 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00636 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c059 00637 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00638 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c05b 00639 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00640 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c05d 00641 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00642 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c05f 00643 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00644 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c017 00645 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00646 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c019 00647 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10013 00648 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c018 00649 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00650 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c01a 00651 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00652 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c01c 00653 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00654 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c01e 00655 464 NtUserFindExistingCursorIcon (1239812, 1239828, 1239876, ... ) == 0x10011 00656 464 NtUserRegisterClassExWOW (1239812, 1239880, 1239896, 1239912, 0, 384, 0, ... ) == 0x81b1c01b 00657 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00658 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c068 00659 464 NtUserFindExistingCursorIcon (1239820, 1239836, 1239884, ... ) == 0x10011 00660 464 NtUserRegisterClassExWOW (1239764, 1239832, 1239848, 1239864, 0, 384, 0, ... ) == 0x81b1c06a 00661 464 NtOpenSection (0xe, {24, 8, 0x40, 0, 0, (0xe, {24, 8, 0x40, 0, 0, "comctl32.dll"}, ... 64, ) }, ... 64, ) == 0x0 00662 464 NtMapViewOfSection (64, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 4, ... (0x5d090000), 0x0, 630784, ) == 0x0 00663 464 NtClose (64, ... ) == 0x0 00664 464 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00665 464 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00666 464 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00667 464 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00668 464 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00669 464 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00670 464 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00671 464 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00672 464 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00673 464 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00674 464 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00675 464 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00676 464 NtProtectVirtualMemory (-1, (0x5d091000), 1656, 4, ... (0x5d091000), 4096, 32, ) == 0x0 00677 464 NtProtectVirtualMemory (-1, (0x5d091000), 4096, 32, ... (0x5d091000), 4096, 4, ) == 0x0 00678 464 NtFlushInstructionCache (-1, 1560875008, 1656, ... ) == 0x0 00679 464 NtOpenKey (0x80000000, {24, 0, 0x40, 0, 0, (0x80000000, {24, 0, 0x40, 0, 0, "\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00680 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00681 464 NtAllocateVirtualMemory (-1, 0, 0, 65536, 8192, 4, ... 9175040, 65536, ) == 0x0 00682 464 NtAllocateVirtualMemory (-1, 9175040, 0, 4096, 4096, 4, ... 9175040, 4096, ) == 0x0 00683 464 NtAllocateVirtualMemory (-1, 9179136, 0, 8192, 4096, 4, ... 9179136, 8192, ) == 0x0 00684 464 NtAllocateVirtualMemory (-1, 9187328, 0, 4096, 4096, 4, ... 9187328, 4096, ) == 0x0 00685 464 NtAllocateVirtualMemory (-1, 9191424, 0, 4096, 4096, 4, ... 9191424, 4096, ) == 0x0 00686 464 NtQueryDefaultUILanguage (1239820, ... 00687 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00688 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... -2147482740, ) == 0x0 00689 464 NtQueryInformationToken (-2147482740, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00690 464 NtClose (-2147482740, ... ) == 0x0 00691 464 NtOpenKey (0x2000000, {24, 0, 0x640, 0, 0, (0x2000000, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... -2147482740, ) }, ... -2147482740, ) == 0x0 00692 464 NtOpenKey (0x80000000, {24, -2147482740, 0x240, 0, 0, (0x80000000, {24, -2147482740, 0x240, 0, 0, "Software\Policies\Microsoft\Control Panel\Desktop"}, ... ) }, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00693 464 NtOpenKey (0x80000000, {24, -2147482740, 0x640, 0, 0, (0x80000000, {24, -2147482740, 0x640, 0, 0, "Control Panel\Desktop"}, ... -2147481328, ) }, ... -2147481328, ) == 0x0 00694 464 NtQueryValueKey (-2147481328, (-2147481328, "MultiUILanguageId", Partial, 256, ... ) , Partial, 256, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00695 464 NtClose (-2147481328, ... ) == 0x0 00696 464 NtClose (-2147482740, ... ) == 0x0 00686 464 NtQueryDefaultUILanguage ... ) == 0x0 00697 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll"}, 1, 96, ... 64, {status=0x0, info=1}, ) }, 1, 96, ... 64, {status=0x0, info=1}, ) == 0x0 00698 464 NtCreateSection (0x4, 0x0, 0x0, 2, 134217728, 64, ... 56, ) == 0x0 00699 464 NtMapViewOfSection (56, -1, (0x0), 0, 0, 0x0, 0, 1, 0, 2, ... (0x8e0000), 0x0, 618496, ) == 0x0 00700 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Manifest"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00701 464 NtQueryDefaultLocale (1, 1237916, ... ) == 0x0 00702 464 NtOpenFile (0x1200a9, {24, 0, 0x40, 0, 0, (0x1200a9, {24, 0, 0x40, 0, 0, "\??\C:\WINDOWS\system32\comctl32.dll.124.Config"}, 1, 96, ... ) }, 1, 96, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00703 464 NtRequestWaitReplyPort (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1036, 464, 57966, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ... {128, 156, reply, 0, 1036, 464, 57966, 0} (24, {128, 156, new_msg, 0, 2088850039, 1238952, 1179817, 1238676} "\210\6\31\1\33\0\1\0`\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ... {128, 156, reply, 0, 1036, 464, 57966, 0} "\300\270\26\0\33\0\1\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\11\4\1\1\1\0@\0D\0\250\6\31\1@\0\0\0\377\377\377\377\0\0\0\0\340q\225\0\0\0\0\0k\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0,\0\354\6\31\1\0\0\0\0\0\0\0\0\234\353\22\0\0\0\0\0" ) ) == 0x0 00704 464 NtClose (64, ... ) == 0x0 00705 464 NtClose (56, ... ) == 0x0 00706 464 NtUnmapViewOfSection (-1, 0x8e0000, ... ) == 0x0 00707 464 NtQueryDebugFilterState (53, 2, ... ) == 0x0 00708 464 NtOpenProcess (0x400, {24, 0, 0x0, 0, 0, 0x0}, {1036, 0}, ... 56, ) == 0x0 00709 464 NtQueryInformationProcess (56, Session, 4, ... {SessionId=0,}, 0x0, ) == 0x0 00710 464 NtClose (56, ... ) == 0x0 00711 464 NtUserRegisterWindowMessage ( ("ShellGetDragImage", ... ) , ... ) == 0xc03a 00712 464 NtUserSystemParametersInfo (104, 0, 1561338260, 0, ... ) == 0x1 00713 464 NtUserSystemParametersInfo (38, 4, 1561337988, 0, ... ) == 0x1 00714 464 NtOpenThreadTokenEx (-2, 0x20008, 1, 512, ... ) == STATUS_NO_TOKEN 00715 464 NtOpenProcessTokenEx (-1, 0x20008, 512, ... 56, ) == 0x0 00716 464 NtQueryInformationToken (56, User, 80, ... {token info, class 1, size 36}, 36, ) == 0x0 00717 464 NtClose (56, ... ) == 0x0 00718 464 NtOpenKey (0x20019, {24, 0, 0x640, 0, 0, (0x20019, {24, 0, 0x640, 0, 0, "\REGISTRY\USER\S-1-5-21-1292428093-1383384898-725345543-1003"}, ... 56, ) }, ... 56, ) == 0x0 00719 464 NtOpenProcessToken (-1, 0x8, ... 64, ) == 0x0 00720 464 NtAccessCheck (1332816, 64, 0x1, 1241012, 1241064, 56, 1241044, ... ) == STATUS_NO_IMPERSONATION_TOKEN 00721 464 NtClose (64, ... ) == 0x0 00722 464 NtOpenKey (0x20019, {24, 56, 0x40, 0, 0, (0x20019, {24, 56, 0x40, 0, 0, "Control Panel\Desktop"}, ... 64, ) }, ... 64, ) == 0x0 00723 464 NtQueryValueKey (64, (64, "SmoothScroll", Partial, 144, ... ) , Partial, 144, ... ) == STATUS_OBJECT_NAME_NOT_FOUND 00724 464 NtClose (64, ... ) == 0x0 00725 464 NtUserSystemParametersInfo (41, 500, 1241192, 0, ... ) == 0x1 00726 464 NtUserSystemParametersInfo (102, 0, 1561338280, 0, ... ) == 0x1 00727 464 NtClose (56, ... ) == 0x0 00728 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00729 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c03b 00730 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c03d 00731 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00732 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c03f 00733 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00734 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c041 00735 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00736 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c043 00737 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c045 00738 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00739 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c047 00740 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00741 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c049 00742 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00743 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c04b 00744 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00745 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c04d 00746 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00747 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c04f 00748 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c051 00749 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00750 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c053 00751 464 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00752 464 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x81b1c055 00753 464 NtUserFindExistingCursorIcon (1240940, 1240956, 1241004, ... ) == 0x10011 00754 464 NtUserRegisterClassExWOW (1240884, 1240952, 1240968, 1240984, 0, 384, 0, ... ) == 0x81b1c057 00755 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00756 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c059 00757 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10013 00758 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c05b 00759 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00760 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c05d 00761 464 NtUserFindExistingCursorIcon (1240944, 1240960, 1241008, ... ) == 0x10011 00762 464 NtUserRegisterClassExWOW (1240888, 1240956, 1240972, 1240988, 0, 384, 0, ... ) == 0x81b1c05f 00763 464 NtQuerySystemInformation (Basic, 44, ... {Unknown=0,MaximumIncrement=156250,PhysicalPageSize=0x1000,NumberOfPhysicalPages=0xff7c,LowestPhysicalPage=0x1,HighestPhysicalPage=0xffff,AllocationGranularity=0x10000,LowestUserAddress=0x10000,HighestUserAddress=0x7ffeffff,ActiveProcessors=1,NumberProcessors=1,}, 0x0, ) == 0x0 00764 464 NtQuerySystemInformation (Processor, 12, ... {system info, class 1, size 12}, 0x0, ) == 0x0 00765 464 NtTestAlert (... ) == 0x0 00766 464 NtContinue (1244464, 1, ... 00767 464 NtSetInformationThread (-2, Win32StartAddress(LpcReceivedMessageId), {StartAddress(LpcReceivedMsgId)=0x411709,}, 4, ... ) == 0x0 00768 464 NtQueryVirtualMemory (-1, 0x47d625, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00769 464 NtContinue (1244336, 0, ... 00770 464 NtAllocateVirtualMemory (-1, 0, 0, 122368, 4096, 4, ... 9306112, 122880, ) == 0x0 00771 464 NtQueryVirtualMemory (-1, 0x47d8a0, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00772 464 NtContinue (1244320, 0, ... 00773 464 NtAllocateVirtualMemory (-1, 0, 0, 147456, 4096, 4, ... 9437184, 147456, ) == 0x0 00774 464 NtQueryVirtualMemory (-1, 0x47d9ca, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x3000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00775 464 NtContinue (1244320, 0, ... 00776 464 NtQueryVirtualMemory (-1, 0x47dabd, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00777 464 NtContinue (1244328, 0, ... 00778 464 NtQueryVirtualMemory (-1, 0x47dba9, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00779 464 NtContinue (1244316, 0, ... 00780 464 NtQueryVirtualMemory (-1, 0x47dccd, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00781 464 NtContinue (1244328, 0, ... 00782 464 NtQueryVirtualMemory (-1, 0x47dde5, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00783 464 NtContinue (1244336, 0, ... 00784 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00785 464 NtContinue (1244328, 0, ... 00786 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00787 464 NtContinue (1244328, 0, ... 00788 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00789 464 NtContinue (1244328, 0, ... 00790 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00791 464 NtContinue (1244328, 0, ... 00792 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00793 464 NtContinue (1244328, 0, ... 00794 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00795 464 NtContinue (1244328, 0, ... 00796 464 NtQueryVirtualMemory (-1, 0x47df9e, Basic, 28, ... {BaseAddress=0x47d000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x1000,State=0x1000,Protect=0x40,Type=0x1000000,}, 28, ) == 0x0 00797 464 NtContinue (1244328, 0, ... 00798 464 NtFreeVirtualMemory (-1, (0x8e0000), 122368, 16384, ... (0x8e0000), 122880, ) == 0x0 00799 464 NtQueryVirtualMemory (-1, 0x47e2b8, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00800 464 NtContinue (1244336, 0, ... 00801 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00802 464 NtContinue (1244336, 0, ... 00803 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00804 464 NtContinue (1244336, 0, ... 00805 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00806 464 NtContinue (1244336, 0, ... 00807 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00808 464 NtContinue (1244336, 0, ... 00809 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00810 464 NtContinue (1244336, 0, ... 00811 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00812 464 NtContinue (1244336, 0, ... 00813 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00814 464 NtContinue (1244336, 0, ... 00815 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00816 464 NtContinue (1244336, 0, ... 00817 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00818 464 NtContinue (1244336, 0, ... 00819 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00820 464 NtContinue (1244336, 0, ... 00821 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00822 464 NtContinue (1244336, 0, ... 00823 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00824 464 NtContinue (1244336, 0, ... 00825 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00826 464 NtContinue (1244336, 0, ... 00827 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00828 464 NtContinue (1244336, 0, ... 00829 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00830 464 NtContinue (1244336, 0, ... 00831 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00832 464 NtContinue (1244336, 0, ... 00833 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00834 464 NtContinue (1244336, 0, ... 00835 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00836 464 NtContinue (1244336, 0, ... 00837 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00838 464 NtContinue (1244336, 0, ... 00839 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00840 464 NtContinue (1244336, 0, ... 00841 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00842 464 NtContinue (1244336, 0, ... 00843 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00844 464 NtContinue (1244336, 0, ... 00845 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00846 464 NtContinue (1244336, 0, ... 00847 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00848 464 NtContinue (1244336, 0, ... 00849 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00850 464 NtContinue (1244336, 0, ... 00851 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00852 464 NtContinue (1244336, 0, ... 00853 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00854 464 NtContinue (1244336, 0, ... 00855 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00856 464 NtContinue (1244336, 0, ... 00857 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00858 464 NtContinue (1244336, 0, ... 00859 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00860 464 NtContinue (1244336, 0, ... 00861 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00862 464 NtContinue (1244336, 0, ... 00863 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00864 464 NtContinue (1244336, 0, ... 00865 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00866 464 NtContinue (1244336, 0, ... 00867 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00868 464 NtContinue (1244336, 0, ... 00869 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00870 464 NtContinue (1244336, 0, ... 00871 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00872 464 NtContinue (1244336, 0, ... 00873 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00874 464 NtContinue (1244336, 0, ... 00875 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00876 464 NtContinue (1244336, 0, ... 00877 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00878 464 NtContinue (1244336, 0, ... 00879 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00880 464 NtContinue (1244336, 0, ... 00881 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00882 464 NtContinue (1244336, 0, ... 00883 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00884 464 NtContinue (1244336, 0, ... 00885 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00886 464 NtContinue (1244336, 0, ... 00887 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00888 464 NtContinue (1244336, 0, ... 00889 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00890 464 NtContinue (1244336, 0, ... 00891 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00892 464 NtContinue (1244336, 0, ... 00893 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00894 464 NtContinue (1244336, 0, ... 00895 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00896 464 NtContinue (1244336, 0, ... 00897 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00898 464 NtContinue (1244336, 0, ... 00899 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00900 464 NtContinue (1244336, 0, ... 00901 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00902 464 NtContinue (1244336, 0, ... 00903 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00904 464 NtContinue (1244336, 0, ... 00905 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00906 464 NtContinue (1244336, 0, ... 00907 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00908 464 NtContinue (1244336, 0, ... 00909 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00910 464 NtContinue (1244336, 0, ... 00911 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00912 464 NtContinue (1244336, 0, ... 00913 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00914 464 NtContinue (1244336, 0, ... 00915 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00916 464 NtContinue (1244336, 0, ... 00917 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00918 464 NtContinue (1244336, 0, ... 00919 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00920 464 NtContinue (1244336, 0, ... 00921 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00922 464 NtContinue (1244336, 0, ... 00923 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00924 464 NtContinue (1244336, 0, ... 00925 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00926 464 NtContinue (1244336, 0, ... 00927 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00928 464 NtContinue (1244336, 0, ... 00929 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00930 464 NtContinue (1244336, 0, ... 00931 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00932 464 NtContinue (1244336, 0, ... 00933 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00934 464 NtContinue (1244336, 0, ... 00935 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00936 464 NtContinue (1244336, 0, ... 00937 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00938 464 NtContinue (1244336, 0, ... 00939 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00940 464 NtContinue (1244336, 0, ... 00941 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00942 464 NtContinue (1244336, 0, ... 00943 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00944 464 NtContinue (1244336, 0, ... 00945 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00946 464 NtContinue (1244336, 0, ... 00947 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00948 464 NtContinue (1244336, 0, ... 00949 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00950 464 NtContinue (1244336, 0, ... 00951 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00952 464 NtContinue (1244336, 0, ... 00953 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00954 464 NtContinue (1244336, 0, ... 00955 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00956 464 NtContinue (1244336, 0, ... 00957 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00958 464 NtContinue (1244336, 0, ... 00959 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00960 464 NtContinue (1244336, 0, ... 00961 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00962 464 NtContinue (1244336, 0, ... 00963 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00964 464 NtContinue (1244336, 0, ... 00965 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00966 464 NtContinue (1244336, 0, ... 00967 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00968 464 NtContinue (1244336, 0, ... 00969 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00970 464 NtContinue (1244336, 0, ... 00971 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00972 464 NtContinue (1244336, 0, ... 00973 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00974 464 NtContinue (1244336, 0, ... 00975 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00976 464 NtContinue (1244336, 0, ... 00977 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00978 464 NtContinue (1244336, 0, ... 00979 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00980 464 NtContinue (1244336, 0, ... 00981 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00982 464 NtContinue (1244336, 0, ... 00983 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00984 464 NtContinue (1244336, 0, ... 00985 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00986 464 NtContinue (1244336, 0, ... 00987 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00988 464 NtContinue (1244336, 0, ... 00989 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00990 464 NtContinue (1244336, 0, ... 00991 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00992 464 NtContinue (1244336, 0, ... 00993 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00994 464 NtContinue (1244336, 0, ... 00995 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00996 464 NtContinue (1244336, 0, ... 00997 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 00998 464 NtContinue (1244336, 0, ... 00999 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01000 464 NtContinue (1244336, 0, ... 01001 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01002 464 NtContinue (1244336, 0, ... 01003 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01004 464 NtContinue (1244336, 0, ... 01005 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01006 464 NtContinue (1244336, 0, ... 01007 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01008 464 NtContinue (1244336, 0, ... 01009 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01010 464 NtContinue (1244336, 0, ... 01011 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01012 464 NtContinue (1244336, 0, ... 01013 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01014 464 NtContinue (1244336, 0, ... 01015 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01016 464 NtContinue (1244336, 0, ... 01017 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01018 464 NtContinue (1244336, 0, ... 01019 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01020 464 NtContinue (1244336, 0, ... 01021 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01022 464 NtContinue (1244336, 0, ... 01023 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01024 464 NtContinue (1244336, 0, ... 01025 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01026 464 NtContinue (1244336, 0, ... 01027 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01028 464 NtContinue (1244336, 0, ... 01029 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01030 464 NtContinue (1244336, 0, ... 01031 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01032 464 NtContinue (1244336, 0, ... 01033 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01034 464 NtContinue (1244336, 0, ... 01035 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01036 464 NtContinue (1244336, 0, ... 01037 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01038 464 NtContinue (1244336, 0, ... 01039 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01040 464 NtContinue (1244336, 0, ... 01041 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01042 464 NtContinue (1244336, 0, ... 01043 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01044 464 NtContinue (1244336, 0, ... 01045 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01046 464 NtContinue (1244336, 0, ... 01047 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01048 464 NtContinue (1244336, 0, ... 01049 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01050 464 NtContinue (1244336, 0, ... 01051 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01052 464 NtContinue (1244336, 0, ... 01053 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01054 464 NtContinue (1244336, 0, ... 01055 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01056 464 NtContinue (1244336, 0, ... 01057 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01058 464 NtContinue (1244336, 0, ... 01059 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01060 464 NtContinue (1244336, 0, ... 01061 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01062 464 NtContinue (1244336, 0, ... 01063 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01064 464 NtContinue (1244336, 0, ... 01065 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01066 464 NtContinue (1244336, 0, ... 01067 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01068 464 NtContinue (1244336, 0, ... 01069 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01070 464 NtContinue (1244336, 0, ... 01071 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01072 464 NtContinue (1244336, 0, ... 01073 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01074 464 NtContinue (1244336, 0, ... 01075 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01076 464 NtContinue (1244336, 0, ... 01077 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01078 464 NtContinue (1244336, 0, ... 01079 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01080 464 NtContinue (1244336, 0, ... 01081 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01082 464 NtContinue (1244336, 0, ... 01083 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01084 464 NtContinue (1244336, 0, ... 01085 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01086 464 NtContinue (1244336, 0, ... 01087 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01088 464 NtContinue (1244336, 0, ... 01089 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01090 464 NtContinue (1244336, 0, ... 01091 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01092 464 NtContinue (1244336, 0, ... 01093 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01094 464 NtContinue (1244336, 0, ... 01095 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01096 464 NtContinue (1244336, 0, ... 01097 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01098 464 NtContinue (1244336, 0, ... 01099 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01100 464 NtContinue (1244336, 0, ... 01101 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01102 464 NtContinue (1244336, 0, ... 01103 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01104 464 NtContinue (1244336, 0, ... 01105 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01106 464 NtContinue (1244336, 0, ... 01107 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01108 464 NtContinue (1244336, 0, ... 01109 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01110 464 NtContinue (1244336, 0, ... 01111 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01112 464 NtContinue (1244336, 0, ... 01113 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01114 464 NtContinue (1244336, 0, ... 01115 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01116 464 NtContinue (1244336, 0, ... 01117 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01118 464 NtContinue (1244336, 0, ... 01119 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01120 464 NtContinue (1244336, 0, ... 01121 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01122 464 NtContinue (1244336, 0, ... 01123 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01124 464 NtContinue (1244336, 0, ... 01125 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01126 464 NtContinue (1244336, 0, ... 01127 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01128 464 NtContinue (1244336, 0, ... 01129 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01130 464 NtContinue (1244336, 0, ... 01131 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01132 464 NtContinue (1244336, 0, ... 01133 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01134 464 NtContinue (1244336, 0, ... 01135 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01136 464 NtContinue (1244336, 0, ... 01137 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01138 464 NtContinue (1244336, 0, ... 01139 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01140 464 NtContinue (1244336, 0, ... 01141 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01142 464 NtContinue (1244336, 0, ... 01143 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01144 464 NtContinue (1244336, 0, ... 01145 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01146 464 NtContinue (1244336, 0, ... 01147 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01148 464 NtContinue (1244336, 0, ... 01149 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01150 464 NtContinue (1244336, 0, ... 01151 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01152 464 NtContinue (1244336, 0, ... 01153 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01154 464 NtContinue (1244336, 0, ... 01155 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01156 464 NtContinue (1244336, 0, ... 01157 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01158 464 NtContinue (1244336, 0, ... 01159 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01160 464 NtContinue (1244336, 0, ... 01161 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01162 464 NtContinue (1244336, 0, ... 01163 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01164 464 NtContinue (1244336, 0, ... 01165 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01166 464 NtContinue (1244336, 0, ... 01167 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01168 464 NtContinue (1244336, 0, ... 01169 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01170 464 NtContinue (1244336, 0, ... 01171 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01172 464 NtContinue (1244336, 0, ... 01173 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01174 464 NtContinue (1244336, 0, ... 01175 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01176 464 NtContinue (1244336, 0, ... 01177 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01178 464 NtContinue (1244336, 0, ... 01179 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01180 464 NtContinue (1244336, 0, ... 01181 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01182 464 NtContinue (1244336, 0, ... 01183 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01184 464 NtContinue (1244336, 0, ... 01185 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01186 464 NtContinue (1244336, 0, ... 01187 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01188 464 NtContinue (1244336, 0, ... 01189 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01190 464 NtContinue (1244336, 0, ... 01191 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01192 464 NtContinue (1244336, 0, ... 01193 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01194 464 NtContinue (1244336, 0, ... 01195 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01196 464 NtContinue (1244336, 0, ... 01197 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01198 464 NtContinue (1244336, 0, ... 01199 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01200 464 NtContinue (1244336, 0, ... 01201 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01202 464 NtContinue (1244336, 0, ... 01203 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01204 464 NtContinue (1244336, 0, ... 01205 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01206 464 NtContinue (1244336, 0, ... 01207 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01208 464 NtContinue (1244336, 0, ... 01209 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01210 464 NtContinue (1244336, 0, ... 01211 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01212 464 NtContinue (1244336, 0, ... 01213 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01214 464 NtContinue (1244336, 0, ... 01215 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01216 464 NtContinue (1244336, 0, ... 01217 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01218 464 NtContinue (1244336, 0, ... 01219 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01220 464 NtContinue (1244336, 0, ... 01221 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01222 464 NtContinue (1244336, 0, ... 01223 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01224 464 NtContinue (1244336, 0, ... 01225 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01226 464 NtContinue (1244336, 0, ... 01227 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01228 464 NtContinue (1244336, 0, ... 01229 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01230 464 NtContinue (1244336, 0, ... 01231 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01232 464 NtContinue (1244336, 0, ... 01233 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01234 464 NtContinue (1244336, 0, ... 01235 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01236 464 NtContinue (1244336, 0, ... 01237 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01238 464 NtContinue (1244336, 0, ... 01239 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01240 464 NtContinue (1244336, 0, ... 01241 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01242 464 NtContinue (1244336, 0, ... 01243 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01244 464 NtContinue (1244336, 0, ... 01245 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01246 464 NtContinue (1244336, 0, ... 01247 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01248 464 NtContinue (1244336, 0, ... 01249 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01250 464 NtContinue (1244336, 0, ... 01251 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01252 464 NtContinue (1244336, 0, ... 01253 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01254 464 NtContinue (1244336, 0, ... 01255 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01256 464 NtContinue (1244336, 0, ... 01257 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01258 464 NtContinue (1244336, 0, ... 01259 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01260 464 NtContinue (1244336, 0, ... 01261 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01262 464 NtContinue (1244336, 0, ... 01263 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01264 464 NtContinue (1244336, 0, ... 01265 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01266 464 NtContinue (1244336, 0, ... 01267 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01268 464 NtContinue (1244336, 0, ... 01269 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01270 464 NtContinue (1244336, 0, ... 01271 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01272 464 NtContinue (1244336, 0, ... 01273 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01274 464 NtContinue (1244336, 0, ... 01275 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01276 464 NtContinue (1244336, 0, ... 01277 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01278 464 NtContinue (1244336, 0, ... 01279 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01280 464 NtContinue (1244336, 0, ... 01281 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01282 464 NtContinue (1244336, 0, ... 01283 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01284 464 NtContinue (1244336, 0, ... 01285 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01286 464 NtContinue (1244336, 0, ... 01287 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01288 464 NtContinue (1244336, 0, ... 01289 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01290 464 NtContinue (1244336, 0, ... 01291 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01292 464 NtContinue (1244336, 0, ... 01293 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01294 464 NtContinue (1244336, 0, ... 01295 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01296 464 NtContinue (1244336, 0, ... 01297 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01298 464 NtContinue (1244336, 0, ... 01299 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01300 464 NtContinue (1244336, 0, ... 01301 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01302 464 NtContinue (1244336, 0, ... 01303 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01304 464 NtContinue (1244336, 0, ... 01305 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01306 464 NtContinue (1244336, 0, ... 01307 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01308 464 NtContinue (1244336, 0, ... 01309 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01310 464 NtContinue (1244336, 0, ... 01311 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01312 464 NtContinue (1244336, 0, ... 01313 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01314 464 NtContinue (1244336, 0, ... 01315 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01316 464 NtContinue (1244336, 0, ... 01317 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01318 464 NtContinue (1244336, 0, ... 01319 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01320 464 NtContinue (1244336, 0, ... 01321 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01322 464 NtContinue (1244336, 0, ... 01323 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01324 464 NtContinue (1244336, 0, ... 01325 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01326 464 NtContinue (1244336, 0, ... 01327 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01328 464 NtContinue (1244336, 0, ... 01329 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01330 464 NtContinue (1244336, 0, ... 01331 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01332 464 NtContinue (1244336, 0, ... 01333 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01334 464 NtContinue (1244336, 0, ... 01335 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01336 464 NtContinue (1244336, 0, ... 01337 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01338 464 NtContinue (1244336, 0, ... 01339 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01340 464 NtContinue (1244336, 0, ... 01341 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01342 464 NtContinue (1244336, 0, ... 01343 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01344 464 NtContinue (1244336, 0, ... 01345 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01346 464 NtContinue (1244336, 0, ... 01347 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01348 464 NtContinue (1244336, 0, ... 01349 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01350 464 NtContinue (1244336, 0, ... 01351 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01352 464 NtContinue (1244336, 0, ... 01353 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01354 464 NtContinue (1244336, 0, ... 01355 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01356 464 NtContinue (1244336, 0, ... 01357 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01358 464 NtContinue (1244336, 0, ... 01359 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01360 464 NtContinue (1244336, 0, ... 01361 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01362 464 NtContinue (1244336, 0, ... 01363 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01364 464 NtContinue (1244336, 0, ... 01365 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01366 464 NtContinue (1244336, 0, ... 01367 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01368 464 NtContinue (1244336, 0, ... 01369 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01370 464 NtContinue (1244336, 0, ... 01371 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01372 464 NtContinue (1244336, 0, ... 01373 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01374 464 NtContinue (1244336, 0, ... 01375 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01376 464 NtContinue (1244336, 0, ... 01377 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01378 464 NtContinue (1244336, 0, ... 01379 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01380 464 NtContinue (1244336, 0, ... 01381 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01382 464 NtContinue (1244336, 0, ... 01383 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01384 464 NtContinue (1244336, 0, ... 01385 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01386 464 NtContinue (1244336, 0, ... 01387 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01388 464 NtContinue (1244336, 0, ... 01389 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01390 464 NtContinue (1244336, 0, ... 01391 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01392 464 NtContinue (1244336, 0, ... 01393 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01394 464 NtContinue (1244336, 0, ... 01395 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01396 464 NtContinue (1244336, 0, ... 01397 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01398 464 NtContinue (1244336, 0, ... 01399 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01400 464 NtContinue (1244336, 0, ... 01401 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01402 464 NtContinue (1244336, 0, ... 01403 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01404 464 NtContinue (1244336, 0, ... 01405 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01406 464 NtContinue (1244336, 0, ... 01407 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01408 464 NtContinue (1244336, 0, ... 01409 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01410 464 NtContinue (1244336, 0, ... 01411 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01412 464 NtContinue (1244336, 0, ... 01413 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01414 464 NtContinue (1244336, 0, ... 01415 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01416 464 NtContinue (1244336, 0, ... 01417 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01418 464 NtContinue (1244336, 0, ... 01419 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01420 464 NtContinue (1244336, 0, ... 01421 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01422 464 NtContinue (1244336, 0, ... 01423 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01424 464 NtContinue (1244336, 0, ... 01425 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01426 464 NtContinue (1244336, 0, ... 01427 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01428 464 NtContinue (1244336, 0, ... 01429 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01430 464 NtContinue (1244336, 0, ... 01431 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01432 464 NtContinue (1244336, 0, ... 01433 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01434 464 NtContinue (1244336, 0, ... 01435 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01436 464 NtContinue (1244336, 0, ... 01437 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01438 464 NtContinue (1244336, 0, ... 01439 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01440 464 NtContinue (1244336, 0, ... 01441 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01442 464 NtContinue (1244336, 0, ... 01443 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01444 464 NtContinue (1244336, 0, ... 01445 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01446 464 NtContinue (1244336, 0, ... 01447 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01448 464 NtContinue (1244336, 0, ... 01449 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01450 464 NtContinue (1244336, 0, ... 01451 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01452 464 NtContinue (1244336, 0, ... 01453 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01454 464 NtContinue (1244336, 0, ... 01455 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01456 464 NtContinue (1244336, 0, ... 01457 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01458 464 NtContinue (1244336, 0, ... 01459 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01460 464 NtContinue (1244336, 0, ... 01461 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01462 464 NtContinue (1244336, 0, ... 01463 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01464 464 NtContinue (1244336, 0, ... 01465 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01466 464 NtContinue (1244336, 0, ... 01467 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01468 464 NtContinue (1244336, 0, ... 01469 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01470 464 NtContinue (1244336, 0, ... 01471 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01472 464 NtContinue (1244336, 0, ... 01473 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01474 464 NtContinue (1244336, 0, ... 01475 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01476 464 NtContinue (1244336, 0, ... 01477 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01478 464 NtContinue (1244336, 0, ... 01479 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01480 464 NtContinue (1244336, 0, ... 01481 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01482 464 NtContinue (1244336, 0, ... 01483 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01484 464 NtContinue (1244336, 0, ... 01485 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01486 464 NtContinue (1244336, 0, ... 01487 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01488 464 NtContinue (1244336, 0, ... 01489 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01490 464 NtContinue (1244336, 0, ... 01491 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01492 464 NtContinue (1244336, 0, ... 01493 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01494 464 NtContinue (1244336, 0, ... 01495 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01496 464 NtContinue (1244336, 0, ... 01497 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01498 464 NtContinue (1244336, 0, ... 01499 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01500 464 NtContinue (1244336, 0, ... 01501 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01502 464 NtContinue (1244336, 0, ... 01503 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01504 464 NtContinue (1244336, 0, ... 01505 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01506 464 NtContinue (1244336, 0, ... 01507 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01508 464 NtContinue (1244336, 0, ... 01509 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01510 464 NtContinue (1244336, 0, ... 01511 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01512 464 NtContinue (1244336, 0, ... 01513 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01514 464 NtContinue (1244336, 0, ... 01515 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01516 464 NtContinue (1244336, 0, ... 01517 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01518 464 NtContinue (1244336, 0, ... 01519 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01520 464 NtContinue (1244336, 0, ... 01521 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01522 464 NtContinue (1244336, 0, ... 01523 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01524 464 NtContinue (1244336, 0, ... 01525 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01526 464 NtContinue (1244336, 0, ... 01527 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01528 464 NtContinue (1244336, 0, ... 01529 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01530 464 NtContinue (1244336, 0, ... 01531 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01532 464 NtContinue (1244336, 0, ... 01533 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01534 464 NtContinue (1244336, 0, ... 01535 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01536 464 NtContinue (1244336, 0, ... 01537 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01538 464 NtContinue (1244336, 0, ... 01539 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01540 464 NtContinue (1244336, 0, ... 01541 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01542 464 NtContinue (1244336, 0, ... 01543 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01544 464 NtContinue (1244336, 0, ... 01545 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01546 464 NtContinue (1244336, 0, ... 01547 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01548 464 NtContinue (1244336, 0, ... 01549 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01550 464 NtContinue (1244336, 0, ... 01551 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01552 464 NtContinue (1244336, 0, ... 01553 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01554 464 NtContinue (1244336, 0, ... 01555 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01556 464 NtContinue (1244336, 0, ... 01557 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01558 464 NtContinue (1244336, 0, ... 01559 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01560 464 NtContinue (1244336, 0, ... 01561 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01562 464 NtContinue (1244336, 0, ... 01563 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01564 464 NtContinue (1244336, 0, ... 01565 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01566 464 NtContinue (1244336, 0, ... 01567 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01568 464 NtContinue (1244336, 0, ... 01569 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01570 464 NtContinue (1244336, 0, ... 01571 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01572 464 NtContinue (1244336, 0, ... 01573 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01574 464 NtContinue (1244336, 0, ... 01575 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01576 464 NtContinue (1244336, 0, ... 01577 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01578 464 NtContinue (1244336, 0, ... 01579 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01580 464 NtContinue (1244336, 0, ... 01581 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01582 464 NtContinue (1244336, 0, ... 01583 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01584 464 NtContinue (1244336, 0, ... 01585 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01586 464 NtContinue (1244336, 0, ... 01587 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01588 464 NtContinue (1244336, 0, ... 01589 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01590 464 NtContinue (1244336, 0, ... 01591 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01592 464 NtContinue (1244336, 0, ... 01593 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01594 464 NtContinue (1244336, 0, ... 01595 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01596 464 NtContinue (1244336, 0, ... 01597 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01598 464 NtContinue (1244336, 0, ... 01599 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01600 464 NtContinue (1244336, 0, ... 01601 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01602 464 NtContinue (1244336, 0, ... 01603 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01604 464 NtContinue (1244336, 0, ... 01605 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01606 464 NtContinue (1244336, 0, ... 01607 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01608 464 NtContinue (1244336, 0, ... 01609 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01610 464 NtContinue (1244336, 0, ... 01611 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01612 464 NtContinue (1244336, 0, ... 01613 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01614 464 NtContinue (1244336, 0, ... 01615 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01616 464 NtContinue (1244336, 0, ... 01617 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01618 464 NtContinue (1244336, 0, ... 01619 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01620 464 NtContinue (1244336, 0, ... 01621 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01622 464 NtContinue (1244336, 0, ... 01623 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01624 464 NtContinue (1244336, 0, ... 01625 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01626 464 NtContinue (1244336, 0, ... 01627 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01628 464 NtContinue (1244336, 0, ... 01629 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01630 464 NtContinue (1244336, 0, ... 01631 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01632 464 NtContinue (1244336, 0, ... 01633 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01634 464 NtContinue (1244336, 0, ... 01635 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01636 464 NtContinue (1244336, 0, ... 01637 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01638 464 NtContinue (1244336, 0, ... 01639 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01640 464 NtContinue (1244336, 0, ... 01641 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01642 464 NtContinue (1244336, 0, ... 01643 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01644 464 NtContinue (1244336, 0, ... 01645 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01646 464 NtContinue (1244336, 0, ... 01647 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01648 464 NtContinue (1244336, 0, ... 01649 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01650 464 NtContinue (1244336, 0, ... 01651 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01652 464 NtContinue (1244336, 0, ... 01653 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01654 464 NtContinue (1244336, 0, ... 01655 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01656 464 NtContinue (1244336, 0, ... 01657 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01658 464 NtContinue (1244336, 0, ... 01659 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01660 464 NtContinue (1244336, 0, ... 01661 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01662 464 NtContinue (1244336, 0, ... 01663 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01664 464 NtContinue (1244336, 0, ... 01665 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01666 464 NtContinue (1244336, 0, ... 01667 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01668 464 NtContinue (1244336, 0, ... 01669 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01670 464 NtContinue (1244336, 0, ... 01671 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01672 464 NtContinue (1244336, 0, ... 01673 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01674 464 NtContinue (1244336, 0, ... 01675 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01676 464 NtContinue (1244336, 0, ... 01677 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01678 464 NtContinue (1244336, 0, ... 01679 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01680 464 NtContinue (1244336, 0, ... 01681 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01682 464 NtContinue (1244336, 0, ... 01683 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01684 464 NtContinue (1244336, 0, ... 01685 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01686 464 NtContinue (1244336, 0, ... 01687 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01688 464 NtContinue (1244336, 0, ... 01689 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01690 464 NtContinue (1244336, 0, ... 01691 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01692 464 NtContinue (1244336, 0, ... 01693 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01694 464 NtContinue (1244336, 0, ... 01695 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01696 464 NtContinue (1244336, 0, ... 01697 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01698 464 NtContinue (1244336, 0, ... 01699 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01700 464 NtContinue (1244336, 0, ... 01701 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01702 464 NtContinue (1244336, 0, ... 01703 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01704 464 NtContinue (1244336, 0, ... 01705 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01706 464 NtContinue (1244336, 0, ... 01707 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01708 464 NtContinue (1244336, 0, ... 01709 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01710 464 NtContinue (1244336, 0, ... 01711 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01712 464 NtContinue (1244336, 0, ... 01713 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01714 464 NtContinue (1244336, 0, ... 01715 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01716 464 NtContinue (1244336, 0, ... 01717 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01718 464 NtContinue (1244336, 0, ... 01719 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01720 464 NtContinue (1244336, 0, ... 01721 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01722 464 NtContinue (1244336, 0, ... 01723 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01724 464 NtContinue (1244336, 0, ... 01725 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01726 464 NtContinue (1244336, 0, ... 01727 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01728 464 NtContinue (1244336, 0, ... 01729 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01730 464 NtContinue (1244336, 0, ... 01731 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01732 464 NtContinue (1244336, 0, ... 01733 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01734 464 NtContinue (1244336, 0, ... 01735 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01736 464 NtContinue (1244336, 0, ... 01737 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01738 464 NtContinue (1244336, 0, ... 01739 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01740 464 NtContinue (1244336, 0, ... 01741 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01742 464 NtContinue (1244336, 0, ... 01743 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01744 464 NtContinue (1244336, 0, ... 01745 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01746 464 NtContinue (1244336, 0, ... 01747 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01748 464 NtContinue (1244336, 0, ... 01749 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01750 464 NtContinue (1244336, 0, ... 01751 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01752 464 NtContinue (1244336, 0, ... 01753 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01754 464 NtContinue (1244336, 0, ... 01755 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01756 464 NtContinue (1244336, 0, ... 01757 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01758 464 NtContinue (1244336, 0, ... 01759 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01760 464 NtContinue (1244336, 0, ... 01761 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01762 464 NtContinue (1244336, 0, ... 01763 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01764 464 NtContinue (1244336, 0, ... 01765 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01766 464 NtContinue (1244336, 0, ... 01767 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01768 464 NtContinue (1244336, 0, ... 01769 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01770 464 NtContinue (1244336, 0, ... 01771 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01772 464 NtContinue (1244336, 0, ... 01773 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01774 464 NtContinue (1244336, 0, ... 01775 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01776 464 NtContinue (1244336, 0, ... 01777 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01778 464 NtContinue (1244336, 0, ... 01779 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01780 464 NtContinue (1244336, 0, ... 01781 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01782 464 NtContinue (1244336, 0, ... 01783 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01784 464 NtContinue (1244336, 0, ... 01785 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01786 464 NtContinue (1244336, 0, ... 01787 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01788 464 NtContinue (1244336, 0, ... 01789 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01790 464 NtContinue (1244336, 0, ... 01791 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01792 464 NtContinue (1244336, 0, ... 01793 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01794 464 NtContinue (1244336, 0, ... 01795 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01796 464 NtContinue (1244336, 0, ... 01797 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01798 464 NtContinue (1244336, 0, ... 01799 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01800 464 NtContinue (1244336, 0, ... 01801 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01802 464 NtContinue (1244336, 0, ... 01803 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01804 464 NtContinue (1244336, 0, ... 01805 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01806 464 NtContinue (1244336, 0, ... 01807 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01808 464 NtContinue (1244336, 0, ... 01809 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01810 464 NtContinue (1244336, 0, ... 01811 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01812 464 NtContinue (1244336, 0, ... 01813 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01814 464 NtContinue (1244336, 0, ... 01815 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01816 464 NtContinue (1244336, 0, ... 01817 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01818 464 NtContinue (1244336, 0, ... 01819 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01820 464 NtContinue (1244336, 0, ... 01821 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01822 464 NtContinue (1244336, 0, ... 01823 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01824 464 NtContinue (1244336, 0, ... 01825 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01826 464 NtContinue (1244336, 0, ... 01827 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01828 464 NtContinue (1244336, 0, ... 01829 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01830 464 NtContinue (1244336, 0, ... 01831 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01832 464 NtContinue (1244336, 0, ... 01833 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01834 464 NtContinue (1244336, 0, ... 01835 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01836 464 NtContinue (1244336, 0, ... 01837 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01838 464 NtContinue (1244336, 0, ... 01839 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01840 464 NtContinue (1244336, 0, ... 01841 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01842 464 NtContinue (1244336, 0, ... 01843 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01844 464 NtContinue (1244336, 0, ... 01845 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01846 464 NtContinue (1244336, 0, ... 01847 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01848 464 NtContinue (1244336, 0, ... 01849 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01850 464 NtContinue (1244336, 0, ... 01851 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01852 464 NtContinue (1244336, 0, ... 01853 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01854 464 NtContinue (1244336, 0, ... 01855 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01856 464 NtContinue (1244336, 0, ... 01857 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01858 464 NtContinue (1244336, 0, ... 01859 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01860 464 NtContinue (1244336, 0, ... 01861 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01862 464 NtContinue (1244336, 0, ... 01863 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01864 464 NtContinue (1244336, 0, ... 01865 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01866 464 NtContinue (1244336, 0, ... 01867 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01868 464 NtContinue (1244336, 0, ... 01869 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01870 464 NtContinue (1244336, 0, ... 01871 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01872 464 NtContinue (1244336, 0, ... 01873 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01874 464 NtContinue (1244336, 0, ... 01875 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01876 464 NtContinue (1244336, 0, ... 01877 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01878 464 NtContinue (1244336, 0, ... 01879 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01880 464 NtContinue (1244336, 0, ... 01881 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01882 464 NtContinue (1244336, 0, ... 01883 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01884 464 NtContinue (1244336, 0, ... 01885 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01886 464 NtContinue (1244336, 0, ... 01887 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01888 464 NtContinue (1244336, 0, ... 01889 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01890 464 NtContinue (1244336, 0, ... 01891 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01892 464 NtContinue (1244336, 0, ... 01893 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01894 464 NtContinue (1244336, 0, ... 01895 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01896 464 NtContinue (1244336, 0, ... 01897 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01898 464 NtContinue (1244336, 0, ... 01899 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01900 464 NtContinue (1244336, 0, ... 01901 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01902 464 NtContinue (1244336, 0, ... 01903 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01904 464 NtContinue (1244336, 0, ... 01905 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01906 464 NtContinue (1244336, 0, ... 01907 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01908 464 NtContinue (1244336, 0, ... 01909 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01910 464 NtContinue (1244336, 0, ... 01911 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01912 464 NtContinue (1244336, 0, ... 01913 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01914 464 NtContinue (1244336, 0, ... 01915 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01916 464 NtContinue (1244336, 0, ... 01917 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01918 464 NtContinue (1244336, 0, ... 01919 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01920 464 NtContinue (1244336, 0, ... 01921 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01922 464 NtContinue (1244336, 0, ... 01923 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01924 464 NtContinue (1244336, 0, ... 01925 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01926 464 NtContinue (1244336, 0, ... 01927 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01928 464 NtContinue (1244336, 0, ... 01929 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01930 464 NtContinue (1244336, 0, ... 01931 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01932 464 NtContinue (1244336, 0, ... 01933 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01934 464 NtContinue (1244336, 0, ... 01935 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01936 464 NtContinue (1244336, 0, ... 01937 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01938 464 NtContinue (1244336, 0, ... 01939 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01940 464 NtContinue (1244336, 0, ... 01941 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01942 464 NtContinue (1244336, 0, ... 01943 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01944 464 NtContinue (1244336, 0, ... 01945 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01946 464 NtContinue (1244336, 0, ... 01947 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01948 464 NtContinue (1244336, 0, ... 01949 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01950 464 NtContinue (1244336, 0, ... 01951 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01952 464 NtContinue (1244336, 0, ... 01953 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01954 464 NtContinue (1244336, 0, ... 01955 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01956 464 NtContinue (1244336, 0, ... 01957 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01958 464 NtContinue (1244336, 0, ... 01959 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01960 464 NtContinue (1244336, 0, ... 01961 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01962 464 NtContinue (1244336, 0, ... 01963 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01964 464 NtContinue (1244336, 0, ... 01965 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01966 464 NtContinue (1244336, 0, ... 01967 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01968 464 NtContinue (1244336, 0, ... 01969 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01970 464 NtContinue (1244336, 0, ... 01971 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01972 464 NtContinue (1244336, 0, ... 01973 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01974 464 NtContinue (1244336, 0, ... 01975 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01976 464 NtContinue (1244336, 0, ... 01977 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01978 464 NtContinue (1244336, 0, ... 01979 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01980 464 NtContinue (1244336, 0, ... 01981 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01982 464 NtContinue (1244336, 0, ... 01983 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01984 464 NtContinue (1244336, 0, ... 01985 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01986 464 NtContinue (1244336, 0, ... 01987 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01988 464 NtContinue (1244336, 0, ... 01989 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01990 464 NtContinue (1244336, 0, ... 01991 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01992 464 NtContinue (1244336, 0, ... 01993 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01994 464 NtContinue (1244336, 0, ... 01995 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01996 464 NtContinue (1244336, 0, ... 01997 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 01998 464 NtContinue (1244336, 0, ... 01999 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02000 464 NtContinue (1244336, 0, ... 02001 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02002 464 NtContinue (1244336, 0, ... 02003 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02004 464 NtContinue (1244336, 0, ... 02005 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02006 464 NtContinue (1244336, 0, ... 02007 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02008 464 NtContinue (1244336, 0, ... 02009 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02010 464 NtContinue (1244336, 0, ... 02011 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02012 464 NtContinue (1244336, 0, ... 02013 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02014 464 NtContinue (1244336, 0, ... 02015 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02016 464 NtContinue (1244336, 0, ... 02017 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02018 464 NtContinue (1244336, 0, ... 02019 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02020 464 NtContinue (1244336, 0, ... 02021 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02022 464 NtContinue (1244336, 0, ... 02023 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02024 464 NtContinue (1244336, 0, ... 02025 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02026 464 NtContinue (1244336, 0, ... 02027 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02028 464 NtContinue (1244336, 0, ... 02029 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02030 464 NtContinue (1244336, 0, ... 02031 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02032 464 NtContinue (1244336, 0, ... 02033 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02034 464 NtContinue (1244336, 0, ... 02035 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02036 464 NtContinue (1244336, 0, ... 02037 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02038 464 NtContinue (1244336, 0, ... 02039 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02040 464 NtContinue (1244336, 0, ... 02041 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02042 464 NtContinue (1244336, 0, ... 02043 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02044 464 NtContinue (1244336, 0, ... 02045 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02046 464 NtContinue (1244336, 0, ... 02047 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02048 464 NtContinue (1244336, 0, ... 02049 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02050 464 NtContinue (1244336, 0, ... 02051 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02052 464 NtContinue (1244336, 0, ... 02053 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02054 464 NtContinue (1244336, 0, ... 02055 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02056 464 NtContinue (1244336, 0, ... 02057 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02058 464 NtContinue (1244336, 0, ... 02059 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02060 464 NtContinue (1244336, 0, ... 02061 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02062 464 NtContinue (1244336, 0, ... 02063 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02064 464 NtContinue (1244336, 0, ... 02065 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02066 464 NtContinue (1244336, 0, ... 02067 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02068 464 NtContinue (1244336, 0, ... 02069 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02070 464 NtContinue (1244336, 0, ... 02071 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02072 464 NtContinue (1244336, 0, ... 02073 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02074 464 NtContinue (1244336, 0, ... 02075 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02076 464 NtContinue (1244336, 0, ... 02077 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02078 464 NtContinue (1244336, 0, ... 02079 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02080 464 NtContinue (1244336, 0, ... 02081 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02082 464 NtContinue (1244336, 0, ... 02083 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02084 464 NtContinue (1244336, 0, ... 02085 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02086 464 NtContinue (1244336, 0, ... 02087 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02088 464 NtContinue (1244336, 0, ... 02089 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02090 464 NtContinue (1244336, 0, ... 02091 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02092 464 NtContinue (1244336, 0, ... 02093 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02094 464 NtContinue (1244336, 0, ... 02095 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02096 464 NtContinue (1244336, 0, ... 02097 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02098 464 NtContinue (1244336, 0, ... 02099 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02100 464 NtContinue (1244336, 0, ... 02101 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02102 464 NtContinue (1244336, 0, ... 02103 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02104 464 NtContinue (1244336, 0, ... 02105 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02106 464 NtContinue (1244336, 0, ... 02107 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02108 464 NtContinue (1244336, 0, ... 02109 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02110 464 NtContinue (1244336, 0, ... 02111 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02112 464 NtContinue (1244336, 0, ... 02113 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02114 464 NtContinue (1244336, 0, ... 02115 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02116 464 NtContinue (1244336, 0, ... 02117 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02118 464 NtContinue (1244336, 0, ... 02119 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02120 464 NtContinue (1244336, 0, ... 02121 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02122 464 NtContinue (1244336, 0, ... 02123 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02124 464 NtContinue (1244336, 0, ... 02125 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02126 464 NtContinue (1244336, 0, ... 02127 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02128 464 NtContinue (1244336, 0, ... 02129 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02130 464 NtContinue (1244336, 0, ... 02131 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02132 464 NtContinue (1244336, 0, ... 02133 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02134 464 NtContinue (1244336, 0, ... 02135 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02136 464 NtContinue (1244336, 0, ... 02137 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02138 464 NtContinue (1244336, 0, ... 02139 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02140 464 NtContinue (1244336, 0, ... 02141 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02142 464 NtContinue (1244336, 0, ... 02143 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02144 464 NtContinue (1244336, 0, ... 02145 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02146 464 NtContinue (1244336, 0, ... 02147 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02148 464 NtContinue (1244336, 0, ... 02149 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02150 464 NtContinue (1244336, 0, ... 02151 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02152 464 NtContinue (1244336, 0, ... 02153 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02154 464 NtContinue (1244336, 0, ... 02155 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02156 464 NtContinue (1244336, 0, ... 02157 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02158 464 NtContinue (1244336, 0, ... 02159 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02160 464 NtContinue (1244336, 0, ... 02161 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02162 464 NtContinue (1244336, 0, ... 02163 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02164 464 NtContinue (1244336, 0, ... 02165 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02166 464 NtContinue (1244336, 0, ... 02167 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02168 464 NtContinue (1244336, 0, ... 02169 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02170 464 NtContinue (1244336, 0, ... 02171 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02172 464 NtContinue (1244336, 0, ... 02173 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02174 464 NtContinue (1244336, 0, ... 02175 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02176 464 NtContinue (1244336, 0, ... 02177 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02178 464 NtContinue (1244336, 0, ... 02179 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02180 464 NtContinue (1244336, 0, ... 02181 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02182 464 NtContinue (1244336, 0, ... 02183 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02184 464 NtContinue (1244336, 0, ... 02185 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02186 464 NtContinue (1244336, 0, ... 02187 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02188 464 NtContinue (1244336, 0, ... 02189 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02190 464 NtContinue (1244336, 0, ... 02191 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02192 464 NtContinue (1244336, 0, ... 02193 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02194 464 NtContinue (1244336, 0, ... 02195 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02196 464 NtContinue (1244336, 0, ... 02197 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02198 464 NtContinue (1244336, 0, ... 02199 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02200 464 NtContinue (1244336, 0, ... 02201 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02202 464 NtContinue (1244336, 0, ... 02203 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02204 464 NtContinue (1244336, 0, ... 02205 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02206 464 NtContinue (1244336, 0, ... 02207 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02208 464 NtContinue (1244336, 0, ... 02209 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02210 464 NtContinue (1244336, 0, ... 02211 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02212 464 NtContinue (1244336, 0, ... 02213 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02214 464 NtContinue (1244336, 0, ... 02215 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02216 464 NtContinue (1244336, 0, ... 02217 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02218 464 NtContinue (1244336, 0, ... 02219 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02220 464 NtContinue (1244336, 0, ... 02221 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02222 464 NtContinue (1244336, 0, ... 02223 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02224 464 NtContinue (1244336, 0, ... 02225 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02226 464 NtContinue (1244336, 0, ... 02227 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02228 464 NtContinue (1244336, 0, ... 02229 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02230 464 NtContinue (1244336, 0, ... 02231 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02232 464 NtContinue (1244336, 0, ... 02233 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02234 464 NtContinue (1244336, 0, ... 02235 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02236 464 NtContinue (1244336, 0, ... 02237 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02238 464 NtContinue (1244336, 0, ... 02239 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02240 464 NtContinue (1244336, 0, ... 02241 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02242 464 NtContinue (1244336, 0, ... 02243 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02244 464 NtContinue (1244336, 0, ... 02245 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02246 464 NtContinue (1244336, 0, ... 02247 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02248 464 NtContinue (1244336, 0, ... 02249 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02250 464 NtContinue (1244336, 0, ... 02251 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02252 464 NtContinue (1244336, 0, ... 02253 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02254 464 NtContinue (1244336, 0, ... 02255 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02256 464 NtContinue (1244336, 0, ... 02257 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02258 464 NtContinue (1244336, 0, ... 02259 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02260 464 NtContinue (1244336, 0, ... 02261 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02262 464 NtContinue (1244336, 0, ... 02263 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02264 464 NtContinue (1244336, 0, ... 02265 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02266 464 NtContinue (1244336, 0, ... 02267 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02268 464 NtContinue (1244336, 0, ... 02269 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02270 464 NtContinue (1244336, 0, ... 02271 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02272 464 NtContinue (1244336, 0, ... 02273 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02274 464 NtContinue (1244336, 0, ... 02275 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02276 464 NtContinue (1244336, 0, ... 02277 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02278 464 NtContinue (1244336, 0, ... 02279 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02280 464 NtContinue (1244336, 0, ... 02281 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02282 464 NtContinue (1244336, 0, ... 02283 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02284 464 NtContinue (1244336, 0, ... 02285 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02286 464 NtContinue (1244336, 0, ... 02287 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02288 464 NtContinue (1244336, 0, ... 02289 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02290 464 NtContinue (1244336, 0, ... 02291 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02292 464 NtContinue (1244336, 0, ... 02293 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02294 464 NtContinue (1244336, 0, ... 02295 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02296 464 NtContinue (1244336, 0, ... 02297 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02298 464 NtContinue (1244336, 0, ... 02299 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02300 464 NtContinue (1244336, 0, ... 02301 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02302 464 NtContinue (1244336, 0, ... 02303 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02304 464 NtContinue (1244336, 0, ... 02305 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02306 464 NtContinue (1244336, 0, ... 02307 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02308 464 NtContinue (1244336, 0, ... 02309 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02310 464 NtContinue (1244336, 0, ... 02311 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02312 464 NtContinue (1244336, 0, ... 02313 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02314 464 NtContinue (1244336, 0, ... 02315 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02316 464 NtContinue (1244336, 0, ... 02317 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02318 464 NtContinue (1244336, 0, ... 02319 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02320 464 NtContinue (1244336, 0, ... 02321 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02322 464 NtContinue (1244336, 0, ... 02323 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02324 464 NtContinue (1244336, 0, ... 02325 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02326 464 NtContinue (1244336, 0, ... 02327 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02328 464 NtContinue (1244336, 0, ... 02329 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02330 464 NtContinue (1244336, 0, ... 02331 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02332 464 NtContinue (1244336, 0, ... 02333 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02334 464 NtContinue (1244336, 0, ... 02335 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02336 464 NtContinue (1244336, 0, ... 02337 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02338 464 NtContinue (1244336, 0, ... 02339 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02340 464 NtContinue (1244336, 0, ... 02341 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02342 464 NtContinue (1244336, 0, ... 02343 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02344 464 NtContinue (1244336, 0, ... 02345 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02346 464 NtContinue (1244336, 0, ... 02347 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02348 464 NtContinue (1244336, 0, ... 02349 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02350 464 NtContinue (1244336, 0, ... 02351 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02352 464 NtContinue (1244336, 0, ... 02353 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02354 464 NtContinue (1244336, 0, ... 02355 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02356 464 NtContinue (1244336, 0, ... 02357 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02358 464 NtContinue (1244336, 0, ... 02359 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02360 464 NtContinue (1244336, 0, ... 02361 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02362 464 NtContinue (1244336, 0, ... 02363 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02364 464 NtContinue (1244336, 0, ... 02365 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02366 464 NtContinue (1244336, 0, ... 02367 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02368 464 NtContinue (1244336, 0, ... 02369 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02370 464 NtContinue (1244336, 0, ... 02371 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02372 464 NtContinue (1244336, 0, ... 02373 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02374 464 NtContinue (1244336, 0, ... 02375 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02376 464 NtContinue (1244336, 0, ... 02377 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02378 464 NtContinue (1244336, 0, ... 02379 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02380 464 NtContinue (1244336, 0, ... 02381 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02382 464 NtContinue (1244336, 0, ... 02383 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02384 464 NtContinue (1244336, 0, ... 02385 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02386 464 NtContinue (1244336, 0, ... 02387 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02388 464 NtContinue (1244336, 0, ... 02389 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02390 464 NtContinue (1244336, 0, ... 02391 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02392 464 NtContinue (1244336, 0, ... 02393 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02394 464 NtContinue (1244336, 0, ... 02395 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02396 464 NtContinue (1244336, 0, ... 02397 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02398 464 NtContinue (1244336, 0, ... 02399 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02400 464 NtContinue (1244336, 0, ... 02401 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02402 464 NtContinue (1244336, 0, ... 02403 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02404 464 NtContinue (1244336, 0, ... 02405 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02406 464 NtContinue (1244336, 0, ... 02407 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02408 464 NtContinue (1244336, 0, ... 02409 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02410 464 NtContinue (1244336, 0, ... 02411 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02412 464 NtContinue (1244336, 0, ... 02413 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02414 464 NtContinue (1244336, 0, ... 02415 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02416 464 NtContinue (1244336, 0, ... 02417 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02418 464 NtContinue (1244336, 0, ... 02419 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02420 464 NtContinue (1244336, 0, ... 02421 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02422 464 NtContinue (1244336, 0, ... 02423 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02424 464 NtContinue (1244336, 0, ... 02425 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02426 464 NtContinue (1244336, 0, ... 02427 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02428 464 NtContinue (1244336, 0, ... 02429 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02430 464 NtContinue (1244336, 0, ... 02431 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02432 464 NtContinue (1244336, 0, ... 02433 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02434 464 NtContinue (1244336, 0, ... 02435 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02436 464 NtContinue (1244336, 0, ... 02437 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02438 464 NtContinue (1244336, 0, ... 02439 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02440 464 NtContinue (1244336, 0, ... 02441 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02442 464 NtContinue (1244336, 0, ... 02443 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02444 464 NtContinue (1244336, 0, ... 02445 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02446 464 NtContinue (1244336, 0, ... 02447 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02448 464 NtContinue (1244336, 0, ... 02449 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02450 464 NtContinue (1244336, 0, ... 02451 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02452 464 NtContinue (1244336, 0, ... 02453 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02454 464 NtContinue (1244336, 0, ... 02455 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02456 464 NtContinue (1244336, 0, ... 02457 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02458 464 NtContinue (1244336, 0, ... 02459 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02460 464 NtContinue (1244336, 0, ... 02461 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02462 464 NtContinue (1244336, 0, ... 02463 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02464 464 NtContinue (1244336, 0, ... 02465 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02466 464 NtContinue (1244336, 0, ... 02467 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02468 464 NtContinue (1244336, 0, ... 02469 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02470 464 NtContinue (1244336, 0, ... 02471 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02472 464 NtContinue (1244336, 0, ... 02473 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02474 464 NtContinue (1244336, 0, ... 02475 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02476 464 NtContinue (1244336, 0, ... 02477 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02478 464 NtContinue (1244336, 0, ... 02479 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02480 464 NtContinue (1244336, 0, ... 02481 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02482 464 NtContinue (1244336, 0, ... 02483 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02484 464 NtContinue (1244336, 0, ... 02485 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02486 464 NtContinue (1244336, 0, ... 02487 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02488 464 NtContinue (1244336, 0, ... 02489 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02490 464 NtContinue (1244336, 0, ... 02491 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02492 464 NtContinue (1244336, 0, ... 02493 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02494 464 NtContinue (1244336, 0, ... 02495 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02496 464 NtContinue (1244336, 0, ... 02497 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02498 464 NtContinue (1244336, 0, ... 02499 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02500 464 NtContinue (1244336, 0, ... 02501 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02502 464 NtContinue (1244336, 0, ... 02503 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02504 464 NtContinue (1244336, 0, ... 02505 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02506 464 NtContinue (1244336, 0, ... 02507 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02508 464 NtContinue (1244336, 0, ... 02509 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02510 464 NtContinue (1244336, 0, ... 02511 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02512 464 NtContinue (1244336, 0, ... 02513 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02514 464 NtContinue (1244336, 0, ... 02515 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02516 464 NtContinue (1244336, 0, ... 02517 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02518 464 NtContinue (1244336, 0, ... 02519 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02520 464 NtContinue (1244336, 0, ... 02521 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02522 464 NtContinue (1244336, 0, ... 02523 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02524 464 NtContinue (1244336, 0, ... 02525 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02526 464 NtContinue (1244336, 0, ... 02527 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02528 464 NtContinue (1244336, 0, ... 02529 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02530 464 NtContinue (1244336, 0, ... 02531 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02532 464 NtContinue (1244336, 0, ... 02533 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02534 464 NtContinue (1244336, 0, ... 02535 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02536 464 NtContinue (1244336, 0, ... 02537 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02538 464 NtContinue (1244336, 0, ... 02539 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02540 464 NtContinue (1244336, 0, ... 02541 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02542 464 NtContinue (1244336, 0, ... 02543 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02544 464 NtContinue (1244336, 0, ... 02545 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02546 464 NtContinue (1244336, 0, ... 02547 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02548 464 NtContinue (1244336, 0, ... 02549 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02550 464 NtContinue (1244336, 0, ... 02551 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02552 464 NtContinue (1244336, 0, ... 02553 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02554 464 NtContinue (1244336, 0, ... 02555 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02556 464 NtContinue (1244336, 0, ... 02557 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02558 464 NtContinue (1244336, 0, ... 02559 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02560 464 NtContinue (1244336, 0, ... 02561 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02562 464 NtContinue (1244336, 0, ... 02563 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02564 464 NtContinue (1244336, 0, ... 02565 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02566 464 NtContinue (1244336, 0, ... 02567 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02568 464 NtContinue (1244336, 0, ... 02569 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02570 464 NtContinue (1244336, 0, ... 02571 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02572 464 NtContinue (1244336, 0, ... 02573 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02574 464 NtContinue (1244336, 0, ... 02575 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02576 464 NtContinue (1244336, 0, ... 02577 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02578 464 NtContinue (1244336, 0, ... 02579 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02580 464 NtContinue (1244336, 0, ... 02581 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02582 464 NtContinue (1244336, 0, ... 02583 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02584 464 NtContinue (1244336, 0, ... 02585 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02586 464 NtContinue (1244336, 0, ... 02587 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02588 464 NtContinue (1244336, 0, ... 02589 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02590 464 NtContinue (1244336, 0, ... 02591 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02592 464 NtContinue (1244336, 0, ... 02593 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02594 464 NtContinue (1244336, 0, ... 02595 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02596 464 NtContinue (1244336, 0, ... 02597 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02598 464 NtContinue (1244336, 0, ... 02599 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02600 464 NtContinue (1244336, 0, ... 02601 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02602 464 NtContinue (1244336, 0, ... 02603 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02604 464 NtContinue (1244336, 0, ... 02605 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02606 464 NtContinue (1244336, 0, ... 02607 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02608 464 NtContinue (1244336, 0, ... 02609 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02610 464 NtContinue (1244336, 0, ... 02611 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02612 464 NtContinue (1244336, 0, ... 02613 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02614 464 NtContinue (1244336, 0, ... 02615 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02616 464 NtContinue (1244336, 0, ... 02617 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02618 464 NtContinue (1244336, 0, ... 02619 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02620 464 NtContinue (1244336, 0, ... 02621 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02622 464 NtContinue (1244336, 0, ... 02623 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02624 464 NtContinue (1244336, 0, ... 02625 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02626 464 NtContinue (1244336, 0, ... 02627 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02628 464 NtContinue (1244336, 0, ... 02629 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02630 464 NtContinue (1244336, 0, ... 02631 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02632 464 NtContinue (1244336, 0, ... 02633 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02634 464 NtContinue (1244336, 0, ... 02635 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02636 464 NtContinue (1244336, 0, ... 02637 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02638 464 NtContinue (1244336, 0, ... 02639 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02640 464 NtContinue (1244336, 0, ... 02641 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02642 464 NtContinue (1244336, 0, ... 02643 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02644 464 NtContinue (1244336, 0, ... 02645 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02646 464 NtContinue (1244336, 0, ... 02647 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02648 464 NtContinue (1244336, 0, ... 02649 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02650 464 NtContinue (1244336, 0, ... 02651 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02652 464 NtContinue (1244336, 0, ... 02653 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02654 464 NtContinue (1244336, 0, ... 02655 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02656 464 NtContinue (1244336, 0, ... 02657 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02658 464 NtContinue (1244336, 0, ... 02659 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02660 464 NtContinue (1244336, 0, ... 02661 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02662 464 NtContinue (1244336, 0, ... 02663 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02664 464 NtContinue (1244336, 0, ... 02665 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02666 464 NtContinue (1244336, 0, ... 02667 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02668 464 NtContinue (1244336, 0, ... 02669 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02670 464 NtContinue (1244336, 0, ... 02671 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02672 464 NtContinue (1244336, 0, ... 02673 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02674 464 NtContinue (1244336, 0, ... 02675 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02676 464 NtContinue (1244336, 0, ... 02677 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02678 464 NtContinue (1244336, 0, ... 02679 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02680 464 NtContinue (1244336, 0, ... 02681 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02682 464 NtContinue (1244336, 0, ... 02683 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02684 464 NtContinue (1244336, 0, ... 02685 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02686 464 NtContinue (1244336, 0, ... 02687 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02688 464 NtContinue (1244336, 0, ... 02689 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02690 464 NtContinue (1244336, 0, ... 02691 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02692 464 NtContinue (1244336, 0, ... 02693 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02694 464 NtContinue (1244336, 0, ... 02695 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02696 464 NtContinue (1244336, 0, ... 02697 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02698 464 NtContinue (1244336, 0, ... 02699 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02700 464 NtContinue (1244336, 0, ... 02701 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02702 464 NtContinue (1244336, 0, ... 02703 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02704 464 NtContinue (1244336, 0, ... 02705 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02706 464 NtContinue (1244336, 0, ... 02707 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02708 464 NtContinue (1244336, 0, ... 02709 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02710 464 NtContinue (1244336, 0, ... 02711 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02712 464 NtContinue (1244336, 0, ... 02713 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02714 464 NtContinue (1244336, 0, ... 02715 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02716 464 NtContinue (1244336, 0, ... 02717 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02718 464 NtContinue (1244336, 0, ... 02719 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02720 464 NtContinue (1244336, 0, ... 02721 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02722 464 NtContinue (1244336, 0, ... 02723 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02724 464 NtContinue (1244336, 0, ... 02725 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02726 464 NtContinue (1244336, 0, ... 02727 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02728 464 NtContinue (1244336, 0, ... 02729 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02730 464 NtContinue (1244336, 0, ... 02731 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02732 464 NtContinue (1244336, 0, ... 02733 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02734 464 NtContinue (1244336, 0, ... 02735 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02736 464 NtContinue (1244336, 0, ... 02737 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02738 464 NtContinue (1244336, 0, ... 02739 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02740 464 NtContinue (1244336, 0, ... 02741 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02742 464 NtContinue (1244336, 0, ... 02743 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02744 464 NtContinue (1244336, 0, ... 02745 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02746 464 NtContinue (1244336, 0, ... 02747 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02748 464 NtContinue (1244336, 0, ... 02749 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02750 464 NtContinue (1244336, 0, ... 02751 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02752 464 NtContinue (1244336, 0, ... 02753 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02754 464 NtContinue (1244336, 0, ... 02755 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02756 464 NtContinue (1244336, 0, ... 02757 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02758 464 NtContinue (1244336, 0, ... 02759 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02760 464 NtContinue (1244336, 0, ... 02761 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02762 464 NtContinue (1244336, 0, ... 02763 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02764 464 NtContinue (1244336, 0, ... 02765 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02766 464 NtContinue (1244336, 0, ... 02767 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02768 464 NtContinue (1244336, 0, ... 02769 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02770 464 NtContinue (1244336, 0, ... 02771 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02772 464 NtContinue (1244336, 0, ... 02773 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02774 464 NtContinue (1244336, 0, ... 02775 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02776 464 NtContinue (1244336, 0, ... 02777 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02778 464 NtContinue (1244336, 0, ... 02779 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02780 464 NtContinue (1244336, 0, ... 02781 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02782 464 NtContinue (1244336, 0, ... 02783 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02784 464 NtContinue (1244336, 0, ... 02785 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02786 464 NtContinue (1244336, 0, ... 02787 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02788 464 NtContinue (1244336, 0, ... 02789 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02790 464 NtContinue (1244336, 0, ... 02791 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02792 464 NtContinue (1244336, 0, ... 02793 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02794 464 NtContinue (1244336, 0, ... 02795 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02796 464 NtContinue (1244336, 0, ... 02797 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02798 464 NtContinue (1244336, 0, ... 02799 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02800 464 NtContinue (1244336, 0, ... 02801 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02802 464 NtContinue (1244336, 0, ... 02803 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02804 464 NtContinue (1244336, 0, ... 02805 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02806 464 NtContinue (1244336, 0, ... 02807 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02808 464 NtContinue (1244336, 0, ... 02809 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02810 464 NtContinue (1244336, 0, ... 02811 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02812 464 NtContinue (1244336, 0, ... 02813 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02814 464 NtContinue (1244336, 0, ... 02815 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02816 464 NtContinue (1244336, 0, ... 02817 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02818 464 NtContinue (1244336, 0, ... 02819 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02820 464 NtContinue (1244336, 0, ... 02821 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02822 464 NtContinue (1244336, 0, ... 02823 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02824 464 NtContinue (1244336, 0, ... 02825 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02826 464 NtContinue (1244336, 0, ... 02827 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02828 464 NtContinue (1244336, 0, ... 02829 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02830 464 NtContinue (1244336, 0, ... 02831 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02832 464 NtContinue (1244336, 0, ... 02833 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02834 464 NtContinue (1244336, 0, ... 02835 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02836 464 NtContinue (1244336, 0, ... 02837 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02838 464 NtContinue (1244336, 0, ... 02839 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02840 464 NtContinue (1244336, 0, ... 02841 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02842 464 NtContinue (1244336, 0, ... 02843 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02844 464 NtContinue (1244336, 0, ... 02845 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02846 464 NtContinue (1244336, 0, ... 02847 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02848 464 NtContinue (1244336, 0, ... 02849 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02850 464 NtContinue (1244336, 0, ... 02851 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02852 464 NtContinue (1244336, 0, ... 02853 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02854 464 NtContinue (1244336, 0, ... 02855 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02856 464 NtContinue (1244336, 0, ... 02857 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02858 464 NtContinue (1244336, 0, ... 02859 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02860 464 NtContinue (1244336, 0, ... 02861 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02862 464 NtContinue (1244336, 0, ... 02863 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02864 464 NtContinue (1244336, 0, ... 02865 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02866 464 NtContinue (1244336, 0, ... 02867 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02868 464 NtContinue (1244336, 0, ... 02869 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02870 464 NtContinue (1244336, 0, ... 02871 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02872 464 NtContinue (1244336, 0, ... 02873 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02874 464 NtContinue (1244336, 0, ... 02875 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02876 464 NtContinue (1244336, 0, ... 02877 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02878 464 NtContinue (1244336, 0, ... 02879 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02880 464 NtContinue (1244336, 0, ... 02881 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02882 464 NtContinue (1244336, 0, ... 02883 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02884 464 NtContinue (1244336, 0, ... 02885 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02886 464 NtContinue (1244336, 0, ... 02887 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02888 464 NtContinue (1244336, 0, ... 02889 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02890 464 NtContinue (1244336, 0, ... 02891 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02892 464 NtContinue (1244336, 0, ... 02893 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02894 464 NtContinue (1244336, 0, ... 02895 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02896 464 NtContinue (1244336, 0, ... 02897 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02898 464 NtContinue (1244336, 0, ... 02899 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02900 464 NtContinue (1244336, 0, ... 02901 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02902 464 NtContinue (1244336, 0, ... 02903 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02904 464 NtContinue (1244336, 0, ... 02905 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02906 464 NtContinue (1244336, 0, ... 02907 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02908 464 NtContinue (1244336, 0, ... 02909 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02910 464 NtContinue (1244336, 0, ... 02911 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02912 464 NtContinue (1244336, 0, ... 02913 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02914 464 NtContinue (1244336, 0, ... 02915 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02916 464 NtContinue (1244336, 0, ... 02917 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02918 464 NtContinue (1244336, 0, ... 02919 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02920 464 NtContinue (1244336, 0, ... 02921 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02922 464 NtContinue (1244336, 0, ... 02923 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02924 464 NtContinue (1244336, 0, ... 02925 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02926 464 NtContinue (1244336, 0, ... 02927 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02928 464 NtContinue (1244336, 0, ... 02929 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02930 464 NtContinue (1244336, 0, ... 02931 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02932 464 NtContinue (1244336, 0, ... 02933 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02934 464 NtContinue (1244336, 0, ... 02935 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02936 464 NtContinue (1244336, 0, ... 02937 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02938 464 NtContinue (1244336, 0, ... 02939 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02940 464 NtContinue (1244336, 0, ... 02941 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02942 464 NtContinue (1244336, 0, ... 02943 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02944 464 NtContinue (1244336, 0, ... 02945 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02946 464 NtContinue (1244336, 0, ... 02947 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02948 464 NtContinue (1244336, 0, ... 02949 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02950 464 NtContinue (1244336, 0, ... 02951 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02952 464 NtContinue (1244336, 0, ... 02953 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02954 464 NtContinue (1244336, 0, ... 02955 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02956 464 NtContinue (1244336, 0, ... 02957 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02958 464 NtContinue (1244336, 0, ... 02959 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02960 464 NtContinue (1244336, 0, ... 02961 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02962 464 NtContinue (1244336, 0, ... 02963 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02964 464 NtContinue (1244336, 0, ... 02965 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02966 464 NtContinue (1244336, 0, ... 02967 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02968 464 NtContinue (1244336, 0, ... 02969 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02970 464 NtContinue (1244336, 0, ... 02971 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02972 464 NtContinue (1244336, 0, ... 02973 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02974 464 NtContinue (1244336, 0, ... 02975 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02976 464 NtContinue (1244336, 0, ... 02977 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02978 464 NtContinue (1244336, 0, ... 02979 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02980 464 NtContinue (1244336, 0, ... 02981 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02982 464 NtContinue (1244336, 0, ... 02983 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02984 464 NtContinue (1244336, 0, ... 02985 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02986 464 NtContinue (1244336, 0, ... 02987 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02988 464 NtContinue (1244336, 0, ... 02989 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02990 464 NtContinue (1244336, 0, ... 02991 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02992 464 NtContinue (1244336, 0, ... 02993 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02994 464 NtContinue (1244336, 0, ... 02995 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02996 464 NtContinue (1244336, 0, ... 02997 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 02998 464 NtContinue (1244336, 0, ... 02999 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03000 464 NtContinue (1244336, 0, ... 03001 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03002 464 NtContinue (1244336, 0, ... 03003 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03004 464 NtContinue (1244336, 0, ... 03005 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03006 464 NtContinue (1244336, 0, ... 03007 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03008 464 NtContinue (1244336, 0, ... 03009 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03010 464 NtContinue (1244336, 0, ... 03011 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03012 464 NtContinue (1244336, 0, ... 03013 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03014 464 NtContinue (1244336, 0, ... 03015 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03016 464 NtContinue (1244336, 0, ... 03017 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03018 464 NtContinue (1244336, 0, ... 03019 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03020 464 NtContinue (1244336, 0, ... 03021 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03022 464 NtContinue (1244336, 0, ... 03023 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03024 464 NtContinue (1244336, 0, ... 03025 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03026 464 NtContinue (1244336, 0, ... 03027 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03028 464 NtContinue (1244336, 0, ... 03029 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03030 464 NtContinue (1244336, 0, ... 03031 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03032 464 NtContinue (1244336, 0, ... 03033 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03034 464 NtContinue (1244336, 0, ... 03035 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03036 464 NtContinue (1244336, 0, ... 03037 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03038 464 NtContinue (1244336, 0, ... 03039 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03040 464 NtContinue (1244336, 0, ... 03041 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03042 464 NtContinue (1244336, 0, ... 03043 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03044 464 NtContinue (1244336, 0, ... 03045 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03046 464 NtContinue (1244336, 0, ... 03047 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03048 464 NtContinue (1244336, 0, ... 03049 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03050 464 NtContinue (1244336, 0, ... 03051 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03052 464 NtContinue (1244336, 0, ... 03053 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03054 464 NtContinue (1244336, 0, ... 03055 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03056 464 NtContinue (1244336, 0, ... 03057 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03058 464 NtContinue (1244336, 0, ... 03059 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03060 464 NtContinue (1244336, 0, ... 03061 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03062 464 NtContinue (1244336, 0, ... 03063 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03064 464 NtContinue (1244336, 0, ... 03065 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03066 464 NtContinue (1244336, 0, ... 03067 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03068 464 NtContinue (1244336, 0, ... 03069 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03070 464 NtContinue (1244336, 0, ... 03071 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03072 464 NtContinue (1244336, 0, ... 03073 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03074 464 NtContinue (1244336, 0, ... 03075 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03076 464 NtContinue (1244336, 0, ... 03077 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03078 464 NtContinue (1244336, 0, ... 03079 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03080 464 NtContinue (1244336, 0, ... 03081 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03082 464 NtContinue (1244336, 0, ... 03083 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03084 464 NtContinue (1244336, 0, ... 03085 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03086 464 NtContinue (1244336, 0, ... 03087 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03088 464 NtContinue (1244336, 0, ... 03089 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03090 464 NtContinue (1244336, 0, ... 03091 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03092 464 NtContinue (1244336, 0, ... 03093 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03094 464 NtContinue (1244336, 0, ... 03095 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03096 464 NtContinue (1244336, 0, ... 03097 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03098 464 NtContinue (1244336, 0, ... 03099 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03100 464 NtContinue (1244336, 0, ... 03101 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03102 464 NtContinue (1244336, 0, ... 03103 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03104 464 NtContinue (1244336, 0, ... 03105 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03106 464 NtContinue (1244336, 0, ... 03107 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03108 464 NtContinue (1244336, 0, ... 03109 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03110 464 NtContinue (1244336, 0, ... 03111 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03112 464 NtContinue (1244336, 0, ... 03113 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03114 464 NtContinue (1244336, 0, ... 03115 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03116 464 NtContinue (1244336, 0, ... 03117 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03118 464 NtContinue (1244336, 0, ... 03119 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03120 464 NtContinue (1244336, 0, ... 03121 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03122 464 NtContinue (1244336, 0, ... 03123 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03124 464 NtContinue (1244336, 0, ... 03125 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03126 464 NtContinue (1244336, 0, ... 03127 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03128 464 NtContinue (1244336, 0, ... 03129 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03130 464 NtContinue (1244336, 0, ... 03131 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03132 464 NtContinue (1244336, 0, ... 03133 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03134 464 NtContinue (1244336, 0, ... 03135 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03136 464 NtContinue (1244336, 0, ... 03137 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03138 464 NtContinue (1244336, 0, ... 03139 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03140 464 NtContinue (1244336, 0, ... 03141 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03142 464 NtContinue (1244336, 0, ... 03143 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03144 464 NtContinue (1244336, 0, ... 03145 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03146 464 NtContinue (1244336, 0, ... 03147 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03148 464 NtContinue (1244336, 0, ... 03149 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03150 464 NtContinue (1244336, 0, ... 03151 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03152 464 NtContinue (1244336, 0, ... 03153 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03154 464 NtContinue (1244336, 0, ... 03155 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03156 464 NtContinue (1244336, 0, ... 03157 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03158 464 NtContinue (1244336, 0, ... 03159 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03160 464 NtContinue (1244336, 0, ... 03161 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03162 464 NtContinue (1244336, 0, ... 03163 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03164 464 NtContinue (1244336, 0, ... 03165 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03166 464 NtContinue (1244336, 0, ... 03167 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03168 464 NtContinue (1244336, 0, ... 03169 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03170 464 NtContinue (1244336, 0, ... 03171 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03172 464 NtContinue (1244336, 0, ... 03173 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03174 464 NtContinue (1244336, 0, ... 03175 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03176 464 NtContinue (1244336, 0, ... 03177 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03178 464 NtContinue (1244336, 0, ... 03179 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03180 464 NtContinue (1244336, 0, ... 03181 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03182 464 NtContinue (1244336, 0, ... 03183 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03184 464 NtContinue (1244336, 0, ... 03185 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03186 464 NtContinue (1244336, 0, ... 03187 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03188 464 NtContinue (1244336, 0, ... 03189 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03190 464 NtContinue (1244336, 0, ... 03191 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03192 464 NtContinue (1244336, 0, ... 03193 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03194 464 NtContinue (1244336, 0, ... 03195 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03196 464 NtContinue (1244336, 0, ... 03197 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03198 464 NtContinue (1244336, 0, ... 03199 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03200 464 NtContinue (1244336, 0, ... 03201 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03202 464 NtContinue (1244336, 0, ... 03203 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03204 464 NtContinue (1244336, 0, ... 03205 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03206 464 NtContinue (1244336, 0, ... 03207 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03208 464 NtContinue (1244336, 0, ... 03209 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03210 464 NtContinue (1244336, 0, ... 03211 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03212 464 NtContinue (1244336, 0, ... 03213 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03214 464 NtContinue (1244336, 0, ... 03215 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03216 464 NtContinue (1244336, 0, ... 03217 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03218 464 NtContinue (1244336, 0, ... 03219 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03220 464 NtContinue (1244336, 0, ... 03221 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03222 464 NtContinue (1244336, 0, ... 03223 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03224 464 NtContinue (1244336, 0, ... 03225 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03226 464 NtContinue (1244336, 0, ... 03227 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03228 464 NtContinue (1244336, 0, ... 03229 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03230 464 NtContinue (1244336, 0, ... 03231 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03232 464 NtContinue (1244336, 0, ... 03233 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03234 464 NtContinue (1244336, 0, ... 03235 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03236 464 NtContinue (1244336, 0, ... 03237 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03238 464 NtContinue (1244336, 0, ... 03239 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03240 464 NtContinue (1244336, 0, ... 03241 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03242 464 NtContinue (1244336, 0, ... 03243 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03244 464 NtContinue (1244336, 0, ... 03245 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03246 464 NtContinue (1244336, 0, ... 03247 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03248 464 NtContinue (1244336, 0, ... 03249 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03250 464 NtContinue (1244336, 0, ... 03251 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03252 464 NtContinue (1244336, 0, ... 03253 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03254 464 NtContinue (1244336, 0, ... 03255 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03256 464 NtContinue (1244336, 0, ... 03257 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03258 464 NtContinue (1244336, 0, ... 03259 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03260 464 NtContinue (1244336, 0, ... 03261 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03262 464 NtContinue (1244336, 0, ... 03263 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03264 464 NtContinue (1244336, 0, ... 03265 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03266 464 NtContinue (1244336, 0, ... 03267 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03268 464 NtContinue (1244336, 0, ... 03269 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03270 464 NtContinue (1244336, 0, ... 03271 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03272 464 NtContinue (1244336, 0, ... 03273 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03274 464 NtContinue (1244336, 0, ... 03275 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03276 464 NtContinue (1244336, 0, ... 03277 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03278 464 NtContinue (1244336, 0, ... 03279 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03280 464 NtContinue (1244336, 0, ... 03281 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03282 464 NtContinue (1244336, 0, ... 03283 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03284 464 NtContinue (1244336, 0, ... 03285 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03286 464 NtContinue (1244336, 0, ... 03287 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03288 464 NtContinue (1244336, 0, ... 03289 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03290 464 NtContinue (1244336, 0, ... 03291 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03292 464 NtContinue (1244336, 0, ... 03293 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03294 464 NtContinue (1244336, 0, ... 03295 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03296 464 NtContinue (1244336, 0, ... 03297 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03298 464 NtContinue (1244336, 0, ... 03299 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03300 464 NtContinue (1244336, 0, ... 03301 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03302 464 NtContinue (1244336, 0, ... 03303 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03304 464 NtContinue (1244336, 0, ... 03305 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03306 464 NtContinue (1244336, 0, ... 03307 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03308 464 NtContinue (1244336, 0, ... 03309 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03310 464 NtContinue (1244336, 0, ... 03311 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03312 464 NtContinue (1244336, 0, ... 03313 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03314 464 NtContinue (1244336, 0, ... 03315 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03316 464 NtContinue (1244336, 0, ... 03317 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03318 464 NtContinue (1244336, 0, ... 03319 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03320 464 NtContinue (1244336, 0, ... 03321 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03322 464 NtContinue (1244336, 0, ... 03323 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03324 464 NtContinue (1244336, 0, ... 03325 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03326 464 NtContinue (1244336, 0, ... 03327 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03328 464 NtContinue (1244336, 0, ... 03329 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03330 464 NtContinue (1244336, 0, ... 03331 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03332 464 NtContinue (1244336, 0, ... 03333 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03334 464 NtContinue (1244336, 0, ... 03335 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03336 464 NtContinue (1244336, 0, ... 03337 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03338 464 NtContinue (1244336, 0, ... 03339 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03340 464 NtContinue (1244336, 0, ... 03341 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03342 464 NtContinue (1244336, 0, ... 03343 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03344 464 NtContinue (1244336, 0, ... 03345 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03346 464 NtContinue (1244336, 0, ... 03347 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03348 464 NtContinue (1244336, 0, ... 03349 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03350 464 NtContinue (1244336, 0, ... 03351 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03352 464 NtContinue (1244336, 0, ... 03353 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03354 464 NtContinue (1244336, 0, ... 03355 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03356 464 NtContinue (1244336, 0, ... 03357 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03358 464 NtContinue (1244336, 0, ... 03359 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03360 464 NtContinue (1244336, 0, ... 03361 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03362 464 NtContinue (1244336, 0, ... 03363 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03364 464 NtContinue (1244336, 0, ... 03365 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03366 464 NtContinue (1244336, 0, ... 03367 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03368 464 NtContinue (1244336, 0, ... 03369 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03370 464 NtContinue (1244336, 0, ... 03371 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03372 464 NtContinue (1244336, 0, ... 03373 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03374 464 NtContinue (1244336, 0, ... 03375 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03376 464 NtContinue (1244336, 0, ... 03377 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03378 464 NtContinue (1244336, 0, ... 03379 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03380 464 NtContinue (1244336, 0, ... 03381 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03382 464 NtContinue (1244336, 0, ... 03383 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03384 464 NtContinue (1244336, 0, ... 03385 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03386 464 NtContinue (1244336, 0, ... 03387 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03388 464 NtContinue (1244336, 0, ... 03389 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03390 464 NtContinue (1244336, 0, ... 03391 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03392 464 NtContinue (1244336, 0, ... 03393 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03394 464 NtContinue (1244336, 0, ... 03395 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03396 464 NtContinue (1244336, 0, ... 03397 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03398 464 NtContinue (1244336, 0, ... 03399 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03400 464 NtContinue (1244336, 0, ... 03401 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03402 464 NtContinue (1244336, 0, ... 03403 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03404 464 NtContinue (1244336, 0, ... 03405 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03406 464 NtContinue (1244336, 0, ... 03407 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03408 464 NtContinue (1244336, 0, ... 03409 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03410 464 NtContinue (1244336, 0, ... 03411 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03412 464 NtContinue (1244336, 0, ... 03413 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03414 464 NtContinue (1244336, 0, ... 03415 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03416 464 NtContinue (1244336, 0, ... 03417 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03418 464 NtContinue (1244336, 0, ... 03419 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03420 464 NtContinue (1244336, 0, ... 03421 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03422 464 NtContinue (1244336, 0, ... 03423 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03424 464 NtContinue (1244336, 0, ... 03425 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03426 464 NtContinue (1244336, 0, ... 03427 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03428 464 NtContinue (1244336, 0, ... 03429 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03430 464 NtContinue (1244336, 0, ... 03431 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03432 464 NtContinue (1244336, 0, ... 03433 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03434 464 NtContinue (1244336, 0, ... 03435 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03436 464 NtContinue (1244336, 0, ... 03437 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03438 464 NtContinue (1244336, 0, ... 03439 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03440 464 NtContinue (1244336, 0, ... 03441 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03442 464 NtContinue (1244336, 0, ... 03443 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03444 464 NtContinue (1244336, 0, ... 03445 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03446 464 NtContinue (1244336, 0, ... 03447 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03448 464 NtContinue (1244336, 0, ... 03449 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03450 464 NtContinue (1244336, 0, ... 03451 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03452 464 NtContinue (1244336, 0, ... 03453 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03454 464 NtContinue (1244336, 0, ... 03455 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03456 464 NtContinue (1244336, 0, ... 03457 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03458 464 NtContinue (1244336, 0, ... 03459 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03460 464 NtContinue (1244336, 0, ... 03461 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03462 464 NtContinue (1244336, 0, ... 03463 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03464 464 NtContinue (1244336, 0, ... 03465 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03466 464 NtContinue (1244336, 0, ... 03467 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03468 464 NtContinue (1244336, 0, ... 03469 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03470 464 NtContinue (1244336, 0, ... 03471 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03472 464 NtContinue (1244336, 0, ... 03473 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03474 464 NtContinue (1244336, 0, ... 03475 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03476 464 NtContinue (1244336, 0, ... 03477 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03478 464 NtContinue (1244336, 0, ... 03479 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03480 464 NtContinue (1244336, 0, ... 03481 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03482 464 NtContinue (1244336, 0, ... 03483 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03484 464 NtContinue (1244336, 0, ... 03485 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03486 464 NtContinue (1244336, 0, ... 03487 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03488 464 NtContinue (1244336, 0, ... 03489 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03490 464 NtContinue (1244336, 0, ... 03491 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03492 464 NtContinue (1244336, 0, ... 03493 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03494 464 NtContinue (1244336, 0, ... 03495 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03496 464 NtContinue (1244336, 0, ... 03497 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03498 464 NtContinue (1244336, 0, ... 03499 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03500 464 NtContinue (1244336, 0, ... 03501 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03502 464 NtContinue (1244336, 0, ... 03503 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03504 464 NtContinue (1244336, 0, ... 03505 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03506 464 NtContinue (1244336, 0, ... 03507 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03508 464 NtContinue (1244336, 0, ... 03509 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03510 464 NtContinue (1244336, 0, ... 03511 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03512 464 NtContinue (1244336, 0, ... 03513 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03514 464 NtContinue (1244336, 0, ... 03515 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03516 464 NtContinue (1244336, 0, ... 03517 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03518 464 NtContinue (1244336, 0, ... 03519 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03520 464 NtContinue (1244336, 0, ... 03521 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03522 464 NtContinue (1244336, 0, ... 03523 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03524 464 NtContinue (1244336, 0, ... 03525 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03526 464 NtContinue (1244336, 0, ... 03527 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03528 464 NtContinue (1244336, 0, ... 03529 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03530 464 NtContinue (1244336, 0, ... 03531 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03532 464 NtContinue (1244336, 0, ... 03533 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03534 464 NtContinue (1244336, 0, ... 03535 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03536 464 NtContinue (1244336, 0, ... 03537 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03538 464 NtContinue (1244336, 0, ... 03539 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03540 464 NtContinue (1244336, 0, ... 03541 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03542 464 NtContinue (1244336, 0, ... 03543 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03544 464 NtContinue (1244336, 0, ... 03545 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03546 464 NtContinue (1244336, 0, ... 03547 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03548 464 NtContinue (1244336, 0, ... 03549 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03550 464 NtContinue (1244336, 0, ... 03551 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03552 464 NtContinue (1244336, 0, ... 03553 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03554 464 NtContinue (1244336, 0, ... 03555 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03556 464 NtContinue (1244336, 0, ... 03557 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03558 464 NtContinue (1244336, 0, ... 03559 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03560 464 NtContinue (1244336, 0, ... 03561 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03562 464 NtContinue (1244336, 0, ... 03563 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03564 464 NtContinue (1244336, 0, ... 03565 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03566 464 NtContinue (1244336, 0, ... 03567 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03568 464 NtContinue (1244336, 0, ... 03569 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03570 464 NtContinue (1244336, 0, ... 03571 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03572 464 NtContinue (1244336, 0, ... 03573 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03574 464 NtContinue (1244336, 0, ... 03575 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03576 464 NtContinue (1244336, 0, ... 03577 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03578 464 NtContinue (1244336, 0, ... 03579 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03580 464 NtContinue (1244336, 0, ... 03581 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03582 464 NtContinue (1244336, 0, ... 03583 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03584 464 NtContinue (1244336, 0, ... 03585 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03586 464 NtContinue (1244336, 0, ... 03587 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03588 464 NtContinue (1244336, 0, ... 03589 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03590 464 NtContinue (1244336, 0, ... 03591 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03592 464 NtContinue (1244336, 0, ... 03593 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03594 464 NtContinue (1244336, 0, ... 03595 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03596 464 NtContinue (1244336, 0, ... 03597 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03598 464 NtContinue (1244336, 0, ... 03599 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03600 464 NtContinue (1244336, 0, ... 03601 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03602 464 NtContinue (1244336, 0, ... 03603 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03604 464 NtContinue (1244336, 0, ... 03605 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03606 464 NtContinue (1244336, 0, ... 03607 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03608 464 NtContinue (1244336, 0, ... 03609 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03610 464 NtContinue (1244336, 0, ... 03611 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03612 464 NtContinue (1244336, 0, ... 03613 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03614 464 NtContinue (1244336, 0, ... 03615 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03616 464 NtContinue (1244336, 0, ... 03617 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03618 464 NtContinue (1244336, 0, ... 03619 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03620 464 NtContinue (1244336, 0, ... 03621 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03622 464 NtContinue (1244336, 0, ... 03623 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03624 464 NtContinue (1244336, 0, ... 03625 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03626 464 NtContinue (1244336, 0, ... 03627 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03628 464 NtContinue (1244336, 0, ... 03629 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03630 464 NtContinue (1244336, 0, ... 03631 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03632 464 NtContinue (1244336, 0, ... 03633 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03634 464 NtContinue (1244336, 0, ... 03635 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03636 464 NtContinue (1244336, 0, ... 03637 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03638 464 NtContinue (1244336, 0, ... 03639 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03640 464 NtContinue (1244336, 0, ... 03641 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03642 464 NtContinue (1244336, 0, ... 03643 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03644 464 NtContinue (1244336, 0, ... 03645 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03646 464 NtContinue (1244336, 0, ... 03647 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03648 464 NtContinue (1244336, 0, ... 03649 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03650 464 NtContinue (1244336, 0, ... 03651 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03652 464 NtContinue (1244336, 0, ... 03653 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03654 464 NtContinue (1244336, 0, ... 03655 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03656 464 NtContinue (1244336, 0, ... 03657 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03658 464 NtContinue (1244336, 0, ... 03659 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03660 464 NtContinue (1244336, 0, ... 03661 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03662 464 NtContinue (1244336, 0, ... 03663 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03664 464 NtContinue (1244336, 0, ... 03665 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03666 464 NtContinue (1244336, 0, ... 03667 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03668 464 NtContinue (1244336, 0, ... 03669 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03670 464 NtContinue (1244336, 0, ... 03671 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03672 464 NtContinue (1244336, 0, ... 03673 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03674 464 NtContinue (1244336, 0, ... 03675 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03676 464 NtContinue (1244336, 0, ... 03677 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03678 464 NtContinue (1244336, 0, ... 03679 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03680 464 NtContinue (1244336, 0, ... 03681 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03682 464 NtContinue (1244336, 0, ... 03683 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03684 464 NtContinue (1244336, 0, ... 03685 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03686 464 NtContinue (1244336, 0, ... 03687 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03688 464 NtContinue (1244336, 0, ... 03689 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03690 464 NtContinue (1244336, 0, ... 03691 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03692 464 NtContinue (1244336, 0, ... 03693 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03694 464 NtContinue (1244336, 0, ... 03695 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03696 464 NtContinue (1244336, 0, ... 03697 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03698 464 NtContinue (1244336, 0, ... 03699 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03700 464 NtContinue (1244336, 0, ... 03701 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03702 464 NtContinue (1244336, 0, ... 03703 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03704 464 NtContinue (1244336, 0, ... 03705 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03706 464 NtContinue (1244336, 0, ... 03707 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03708 464 NtContinue (1244336, 0, ... 03709 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03710 464 NtContinue (1244336, 0, ... 03711 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03712 464 NtContinue (1244336, 0, ... 03713 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03714 464 NtContinue (1244336, 0, ... 03715 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03716 464 NtContinue (1244336, 0, ... 03717 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03718 464 NtContinue (1244336, 0, ... 03719 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03720 464 NtContinue (1244336, 0, ... 03721 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03722 464 NtContinue (1244336, 0, ... 03723 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03724 464 NtContinue (1244336, 0, ... 03725 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03726 464 NtContinue (1244336, 0, ... 03727 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03728 464 NtContinue (1244336, 0, ... 03729 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03730 464 NtContinue (1244336, 0, ... 03731 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03732 464 NtContinue (1244336, 0, ... 03733 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03734 464 NtContinue (1244336, 0, ... 03735 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03736 464 NtContinue (1244336, 0, ... 03737 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03738 464 NtContinue (1244336, 0, ... 03739 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03740 464 NtContinue (1244336, 0, ... 03741 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03742 464 NtContinue (1244336, 0, ... 03743 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03744 464 NtContinue (1244336, 0, ... 03745 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03746 464 NtContinue (1244336, 0, ... 03747 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03748 464 NtContinue (1244336, 0, ... 03749 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03750 464 NtContinue (1244336, 0, ... 03751 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03752 464 NtContinue (1244336, 0, ... 03753 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03754 464 NtContinue (1244336, 0, ... 03755 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03756 464 NtContinue (1244336, 0, ... 03757 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03758 464 NtContinue (1244336, 0, ... 03759 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03760 464 NtContinue (1244336, 0, ... 03761 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03762 464 NtContinue (1244336, 0, ... 03763 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03764 464 NtContinue (1244336, 0, ... 03765 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03766 464 NtContinue (1244336, 0, ... 03767 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03768 464 NtContinue (1244336, 0, ... 03769 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03770 464 NtContinue (1244336, 0, ... 03771 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03772 464 NtContinue (1244336, 0, ... 03773 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03774 464 NtContinue (1244336, 0, ... 03775 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03776 464 NtContinue (1244336, 0, ... 03777 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03778 464 NtContinue (1244336, 0, ... 03779 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03780 464 NtContinue (1244336, 0, ... 03781 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03782 464 NtContinue (1244336, 0, ... 03783 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03784 464 NtContinue (1244336, 0, ... 03785 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03786 464 NtContinue (1244336, 0, ... 03787 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03788 464 NtContinue (1244336, 0, ... 03789 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03790 464 NtContinue (1244336, 0, ... 03791 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03792 464 NtContinue (1244336, 0, ... 03793 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03794 464 NtContinue (1244336, 0, ... 03795 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03796 464 NtContinue (1244336, 0, ... 03797 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03798 464 NtContinue (1244336, 0, ... 03799 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03800 464 NtContinue (1244336, 0, ... 03801 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03802 464 NtContinue (1244336, 0, ... 03803 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03804 464 NtContinue (1244336, 0, ... 03805 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03806 464 NtContinue (1244336, 0, ... 03807 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03808 464 NtContinue (1244336, 0, ... 03809 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03810 464 NtContinue (1244336, 0, ... 03811 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03812 464 NtContinue (1244336, 0, ... 03813 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03814 464 NtContinue (1244336, 0, ... 03815 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03816 464 NtContinue (1244336, 0, ... 03817 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03818 464 NtContinue (1244336, 0, ... 03819 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03820 464 NtContinue (1244336, 0, ... 03821 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03822 464 NtContinue (1244336, 0, ... 03823 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03824 464 NtContinue (1244336, 0, ... 03825 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03826 464 NtContinue (1244336, 0, ... 03827 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03828 464 NtContinue (1244336, 0, ... 03829 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03830 464 NtContinue (1244336, 0, ... 03831 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03832 464 NtContinue (1244336, 0, ... 03833 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03834 464 NtContinue (1244336, 0, ... 03835 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03836 464 NtContinue (1244336, 0, ... 03837 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03838 464 NtContinue (1244336, 0, ... 03839 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03840 464 NtContinue (1244336, 0, ... 03841 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03842 464 NtContinue (1244336, 0, ... 03843 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03844 464 NtContinue (1244336, 0, ... 03845 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03846 464 NtContinue (1244336, 0, ... 03847 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03848 464 NtContinue (1244336, 0, ... 03849 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03850 464 NtContinue (1244336, 0, ... 03851 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03852 464 NtContinue (1244336, 0, ... 03853 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03854 464 NtContinue (1244336, 0, ... 03855 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03856 464 NtContinue (1244336, 0, ... 03857 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03858 464 NtContinue (1244336, 0, ... 03859 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03860 464 NtContinue (1244336, 0, ... 03861 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03862 464 NtContinue (1244336, 0, ... 03863 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03864 464 NtContinue (1244336, 0, ... 03865 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03866 464 NtContinue (1244336, 0, ... 03867 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03868 464 NtContinue (1244336, 0, ... 03869 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03870 464 NtContinue (1244336, 0, ... 03871 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03872 464 NtContinue (1244336, 0, ... 03873 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03874 464 NtContinue (1244336, 0, ... 03875 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03876 464 NtContinue (1244336, 0, ... 03877 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03878 464 NtContinue (1244336, 0, ... 03879 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03880 464 NtContinue (1244336, 0, ... 03881 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03882 464 NtContinue (1244336, 0, ... 03883 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03884 464 NtContinue (1244336, 0, ... 03885 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03886 464 NtContinue (1244336, 0, ... 03887 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03888 464 NtContinue (1244336, 0, ... 03889 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03890 464 NtContinue (1244336, 0, ... 03891 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03892 464 NtContinue (1244336, 0, ... 03893 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03894 464 NtContinue (1244336, 0, ... 03895 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03896 464 NtContinue (1244336, 0, ... 03897 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03898 464 NtContinue (1244336, 0, ... 03899 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03900 464 NtContinue (1244336, 0, ... 03901 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03902 464 NtContinue (1244336, 0, ... 03903 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03904 464 NtContinue (1244336, 0, ... 03905 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03906 464 NtContinue (1244336, 0, ... 03907 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03908 464 NtContinue (1244336, 0, ... 03909 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03910 464 NtContinue (1244336, 0, ... 03911 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03912 464 NtContinue (1244336, 0, ... 03913 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03914 464 NtContinue (1244336, 0, ... 03915 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03916 464 NtContinue (1244336, 0, ... 03917 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03918 464 NtContinue (1244336, 0, ... 03919 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03920 464 NtContinue (1244336, 0, ... 03921 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03922 464 NtContinue (1244336, 0, ... 03923 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03924 464 NtContinue (1244336, 0, ... 03925 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03926 464 NtContinue (1244336, 0, ... 03927 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03928 464 NtContinue (1244336, 0, ... 03929 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03930 464 NtContinue (1244336, 0, ... 03931 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03932 464 NtContinue (1244336, 0, ... 03933 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03934 464 NtContinue (1244336, 0, ... 03935 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03936 464 NtContinue (1244336, 0, ... 03937 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03938 464 NtContinue (1244336, 0, ... 03939 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03940 464 NtContinue (1244336, 0, ... 03941 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03942 464 NtContinue (1244336, 0, ... 03943 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03944 464 NtContinue (1244336, 0, ... 03945 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03946 464 NtContinue (1244336, 0, ... 03947 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03948 464 NtContinue (1244336, 0, ... 03949 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03950 464 NtContinue (1244336, 0, ... 03951 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03952 464 NtContinue (1244336, 0, ... 03953 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03954 464 NtContinue (1244336, 0, ... 03955 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03956 464 NtContinue (1244336, 0, ... 03957 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03958 464 NtContinue (1244336, 0, ... 03959 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03960 464 NtContinue (1244336, 0, ... 03961 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03962 464 NtContinue (1244336, 0, ... 03963 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03964 464 NtContinue (1244336, 0, ... 03965 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03966 464 NtContinue (1244336, 0, ... 03967 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03968 464 NtContinue (1244336, 0, ... 03969 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03970 464 NtContinue (1244336, 0, ... 03971 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03972 464 NtContinue (1244336, 0, ... 03973 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03974 464 NtContinue (1244336, 0, ... 03975 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03976 464 NtContinue (1244336, 0, ... 03977 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03978 464 NtContinue (1244336, 0, ... 03979 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03980 464 NtContinue (1244336, 0, ... 03981 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03982 464 NtContinue (1244336, 0, ... 03983 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03984 464 NtContinue (1244336, 0, ... 03985 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03986 464 NtContinue (1244336, 0, ... 03987 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03988 464 NtContinue (1244336, 0, ... 03989 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03990 464 NtContinue (1244336, 0, ... 03991 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03992 464 NtContinue (1244336, 0, ... 03993 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03994 464 NtContinue (1244336, 0, ... 03995 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03996 464 NtContinue (1244336, 0, ... 03997 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 03998 464 NtContinue (1244336, 0, ... 03999 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04000 464 NtContinue (1244336, 0, ... 04001 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04002 464 NtContinue (1244336, 0, ... 04003 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04004 464 NtContinue (1244336, 0, ... 04005 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04006 464 NtContinue (1244336, 0, ... 04007 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04008 464 NtContinue (1244336, 0, ... 04009 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04010 464 NtContinue (1244336, 0, ... 04011 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04012 464 NtContinue (1244336, 0, ... 04013 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04014 464 NtContinue (1244336, 0, ... 04015 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04016 464 NtContinue (1244336, 0, ... 04017 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04018 464 NtContinue (1244336, 0, ... 04019 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04020 464 NtContinue (1244336, 0, ... 04021 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04022 464 NtContinue (1244336, 0, ... 04023 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04024 464 NtContinue (1244336, 0, ... 04025 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04026 464 NtContinue (1244336, 0, ... 04027 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04028 464 NtContinue (1244336, 0, ... 04029 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04030 464 NtContinue (1244336, 0, ... 04031 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04032 464 NtContinue (1244336, 0, ... 04033 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04034 464 NtContinue (1244336, 0, ... 04035 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04036 464 NtContinue (1244336, 0, ... 04037 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04038 464 NtContinue (1244336, 0, ... 04039 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04040 464 NtContinue (1244336, 0, ... 04041 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04042 464 NtContinue (1244336, 0, ... 04043 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04044 464 NtContinue (1244336, 0, ... 04045 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04046 464 NtContinue (1244336, 0, ... 04047 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04048 464 NtContinue (1244336, 0, ... 04049 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04050 464 NtContinue (1244336, 0, ... 04051 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04052 464 NtContinue (1244336, 0, ... 04053 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04054 464 NtContinue (1244336, 0, ... 04055 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04056 464 NtContinue (1244336, 0, ... 04057 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04058 464 NtContinue (1244336, 0, ... 04059 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04060 464 NtContinue (1244336, 0, ... 04061 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04062 464 NtContinue (1244336, 0, ... 04063 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04064 464 NtContinue (1244336, 0, ... 04065 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04066 464 NtContinue (1244336, 0, ... 04067 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04068 464 NtContinue (1244336, 0, ... 04069 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04070 464 NtContinue (1244336, 0, ... 04071 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04072 464 NtContinue (1244336, 0, ... 04073 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04074 464 NtContinue (1244336, 0, ... 04075 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04076 464 NtContinue (1244336, 0, ... 04077 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04078 464 NtContinue (1244336, 0, ... 04079 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04080 464 NtContinue (1244336, 0, ... 04081 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04082 464 NtContinue (1244336, 0, ... 04083 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04084 464 NtContinue (1244336, 0, ... 04085 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04086 464 NtContinue (1244336, 0, ... 04087 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04088 464 NtContinue (1244336, 0, ... 04089 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04090 464 NtContinue (1244336, 0, ... 04091 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04092 464 NtContinue (1244336, 0, ... 04093 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04094 464 NtContinue (1244336, 0, ... 04095 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04096 464 NtContinue (1244336, 0, ... 04097 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04098 464 NtContinue (1244336, 0, ... 04099 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04100 464 NtContinue (1244336, 0, ... 04101 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04102 464 NtContinue (1244336, 0, ... 04103 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04104 464 NtContinue (1244336, 0, ... 04105 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04106 464 NtContinue (1244336, 0, ... 04107 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04108 464 NtContinue (1244336, 0, ... 04109 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04110 464 NtContinue (1244336, 0, ... 04111 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04112 464 NtContinue (1244336, 0, ... 04113 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04114 464 NtContinue (1244336, 0, ... 04115 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04116 464 NtContinue (1244336, 0, ... 04117 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04118 464 NtContinue (1244336, 0, ... 04119 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04120 464 NtContinue (1244336, 0, ... 04121 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04122 464 NtContinue (1244336, 0, ... 04123 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04124 464 NtContinue (1244336, 0, ... 04125 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04126 464 NtContinue (1244336, 0, ... 04127 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04128 464 NtContinue (1244336, 0, ... 04129 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04130 464 NtContinue (1244336, 0, ... 04131 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04132 464 NtContinue (1244336, 0, ... 04133 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04134 464 NtContinue (1244336, 0, ... 04135 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04136 464 NtContinue (1244336, 0, ... 04137 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04138 464 NtContinue (1244336, 0, ... 04139 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04140 464 NtContinue (1244336, 0, ... 04141 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04142 464 NtContinue (1244336, 0, ... 04143 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04144 464 NtContinue (1244336, 0, ... 04145 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04146 464 NtContinue (1244336, 0, ... 04147 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04148 464 NtContinue (1244336, 0, ... 04149 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04150 464 NtContinue (1244336, 0, ... 04151 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04152 464 NtContinue (1244336, 0, ... 04153 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04154 464 NtContinue (1244336, 0, ... 04155 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04156 464 NtContinue (1244336, 0, ... 04157 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04158 464 NtContinue (1244336, 0, ... 04159 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04160 464 NtContinue (1244336, 0, ... 04161 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04162 464 NtContinue (1244336, 0, ... 04163 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04164 464 NtContinue (1244336, 0, ... 04165 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04166 464 NtContinue (1244336, 0, ... 04167 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04168 464 NtContinue (1244336, 0, ... 04169 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04170 464 NtContinue (1244336, 0, ... 04171 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04172 464 NtContinue (1244336, 0, ... 04173 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04174 464 NtContinue (1244336, 0, ... 04175 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04176 464 NtContinue (1244336, 0, ... 04177 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04178 464 NtContinue (1244336, 0, ... 04179 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04180 464 NtContinue (1244336, 0, ... 04181 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04182 464 NtContinue (1244336, 0, ... 04183 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04184 464 NtContinue (1244336, 0, ... 04185 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04186 464 NtContinue (1244336, 0, ... 04187 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04188 464 NtContinue (1244336, 0, ... 04189 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04190 464 NtContinue (1244336, 0, ... 04191 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04192 464 NtContinue (1244336, 0, ... 04193 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04194 464 NtContinue (1244336, 0, ... 04195 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04196 464 NtContinue (1244336, 0, ... 04197 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04198 464 NtContinue (1244336, 0, ... 04199 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04200 464 NtContinue (1244336, 0, ... 04201 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04202 464 NtContinue (1244336, 0, ... 04203 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04204 464 NtContinue (1244336, 0, ... 04205 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04206 464 NtContinue (1244336, 0, ... 04207 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04208 464 NtContinue (1244336, 0, ... 04209 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04210 464 NtContinue (1244336, 0, ... 04211 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04212 464 NtContinue (1244336, 0, ... 04213 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04214 464 NtContinue (1244336, 0, ... 04215 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04216 464 NtContinue (1244336, 0, ... 04217 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04218 464 NtContinue (1244336, 0, ... 04219 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04220 464 NtContinue (1244336, 0, ... 04221 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04222 464 NtContinue (1244336, 0, ... 04223 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04224 464 NtContinue (1244336, 0, ... 04225 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04226 464 NtContinue (1244336, 0, ... 04227 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04228 464 NtContinue (1244336, 0, ... 04229 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04230 464 NtContinue (1244336, 0, ... 04231 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04232 464 NtContinue (1244336, 0, ... 04233 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04234 464 NtContinue (1244336, 0, ... 04235 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04236 464 NtContinue (1244336, 0, ... 04237 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04238 464 NtContinue (1244336, 0, ... 04239 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04240 464 NtContinue (1244336, 0, ... 04241 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04242 464 NtContinue (1244336, 0, ... 04243 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04244 464 NtContinue (1244336, 0, ... 04245 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04246 464 NtContinue (1244336, 0, ... 04247 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04248 464 NtContinue (1244336, 0, ... 04249 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04250 464 NtContinue (1244336, 0, ... 04251 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04252 464 NtContinue (1244336, 0, ... 04253 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04254 464 NtContinue (1244336, 0, ... 04255 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04256 464 NtContinue (1244336, 0, ... 04257 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04258 464 NtContinue (1244336, 0, ... 04259 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04260 464 NtContinue (1244336, 0, ... 04261 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04262 464 NtContinue (1244336, 0, ... 04263 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04264 464 NtContinue (1244336, 0, ... 04265 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04266 464 NtContinue (1244336, 0, ... 04267 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04268 464 NtContinue (1244336, 0, ... 04269 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04270 464 NtContinue (1244336, 0, ... 04271 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04272 464 NtContinue (1244336, 0, ... 04273 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04274 464 NtContinue (1244336, 0, ... 04275 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04276 464 NtContinue (1244336, 0, ... 04277 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04278 464 NtContinue (1244336, 0, ... 04279 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04280 464 NtContinue (1244336, 0, ... 04281 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04282 464 NtContinue (1244336, 0, ... 04283 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04284 464 NtContinue (1244336, 0, ... 04285 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04286 464 NtContinue (1244336, 0, ... 04287 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04288 464 NtContinue (1244336, 0, ... 04289 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04290 464 NtContinue (1244336, 0, ... 04291 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04292 464 NtContinue (1244336, 0, ... 04293 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04294 464 NtContinue (1244336, 0, ... 04295 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04296 464 NtContinue (1244336, 0, ... 04297 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04298 464 NtContinue (1244336, 0, ... 04299 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04300 464 NtContinue (1244336, 0, ... 04301 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04302 464 NtContinue (1244336, 0, ... 04303 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04304 464 NtContinue (1244336, 0, ... 04305 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04306 464 NtContinue (1244336, 0, ... 04307 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04308 464 NtContinue (1244336, 0, ... 04309 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04310 464 NtContinue (1244336, 0, ... 04311 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04312 464 NtContinue (1244336, 0, ... 04313 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04314 464 NtContinue (1244336, 0, ... 04315 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04316 464 NtContinue (1244336, 0, ... 04317 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04318 464 NtContinue (1244336, 0, ... 04319 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04320 464 NtContinue (1244336, 0, ... 04321 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04322 464 NtContinue (1244336, 0, ... 04323 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04324 464 NtContinue (1244336, 0, ... 04325 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04326 464 NtContinue (1244336, 0, ... 04327 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04328 464 NtContinue (1244336, 0, ... 04329 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04330 464 NtContinue (1244336, 0, ... 04331 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04332 464 NtContinue (1244336, 0, ... 04333 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04334 464 NtContinue (1244336, 0, ... 04335 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04336 464 NtContinue (1244336, 0, ... 04337 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04338 464 NtContinue (1244336, 0, ... 04339 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04340 464 NtContinue (1244336, 0, ... 04341 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04342 464 NtContinue (1244336, 0, ... 04343 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04344 464 NtContinue (1244336, 0, ... 04345 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04346 464 NtContinue (1244336, 0, ... 04347 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04348 464 NtContinue (1244336, 0, ... 04349 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04350 464 NtContinue (1244336, 0, ... 04351 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04352 464 NtContinue (1244336, 0, ... 04353 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04354 464 NtContinue (1244336, 0, ... 04355 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04356 464 NtContinue (1244336, 0, ... 04357 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04358 464 NtContinue (1244336, 0, ... 04359 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04360 464 NtContinue (1244336, 0, ... 04361 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04362 464 NtContinue (1244336, 0, ... 04363 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04364 464 NtContinue (1244336, 0, ... 04365 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04366 464 NtContinue (1244336, 0, ... 04367 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04368 464 NtContinue (1244336, 0, ... 04369 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04370 464 NtContinue (1244336, 0, ... 04371 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04372 464 NtContinue (1244336, 0, ... 04373 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04374 464 NtContinue (1244336, 0, ... 04375 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04376 464 NtContinue (1244336, 0, ... 04377 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04378 464 NtContinue (1244336, 0, ... 04379 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04380 464 NtContinue (1244336, 0, ... 04381 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04382 464 NtContinue (1244336, 0, ... 04383 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04384 464 NtContinue (1244336, 0, ... 04385 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04386 464 NtContinue (1244336, 0, ... 04387 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04388 464 NtContinue (1244336, 0, ... 04389 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04390 464 NtContinue (1244336, 0, ... 04391 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04392 464 NtContinue (1244336, 0, ... 04393 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04394 464 NtContinue (1244336, 0, ... 04395 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04396 464 NtContinue (1244336, 0, ... 04397 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04398 464 NtContinue (1244336, 0, ... 04399 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04400 464 NtContinue (1244336, 0, ... 04401 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04402 464 NtContinue (1244336, 0, ... 04403 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04404 464 NtContinue (1244336, 0, ... 04405 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04406 464 NtContinue (1244336, 0, ... 04407 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04408 464 NtContinue (1244336, 0, ... 04409 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04410 464 NtContinue (1244336, 0, ... 04411 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04412 464 NtContinue (1244336, 0, ... 04413 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04414 464 NtContinue (1244336, 0, ... 04415 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04416 464 NtContinue (1244336, 0, ... 04417 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04418 464 NtContinue (1244336, 0, ... 04419 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04420 464 NtContinue (1244336, 0, ... 04421 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04422 464 NtContinue (1244336, 0, ... 04423 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04424 464 NtContinue (1244336, 0, ... 04425 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04426 464 NtContinue (1244336, 0, ... 04427 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04428 464 NtContinue (1244336, 0, ... 04429 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04430 464 NtContinue (1244336, 0, ... 04431 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04432 464 NtContinue (1244336, 0, ... 04433 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04434 464 NtContinue (1244336, 0, ... 04435 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04436 464 NtContinue (1244336, 0, ... 04437 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04438 464 NtContinue (1244336, 0, ... 04439 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04440 464 NtContinue (1244336, 0, ... 04441 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04442 464 NtContinue (1244336, 0, ... 04443 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04444 464 NtContinue (1244336, 0, ... 04445 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04446 464 NtContinue (1244336, 0, ... 04447 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04448 464 NtContinue (1244336, 0, ... 04449 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04450 464 NtContinue (1244336, 0, ... 04451 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04452 464 NtContinue (1244336, 0, ... 04453 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04454 464 NtContinue (1244336, 0, ... 04455 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04456 464 NtContinue (1244336, 0, ... 04457 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04458 464 NtContinue (1244336, 0, ... 04459 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04460 464 NtContinue (1244336, 0, ... 04461 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04462 464 NtContinue (1244336, 0, ... 04463 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04464 464 NtContinue (1244336, 0, ... 04465 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04466 464 NtContinue (1244336, 0, ... 04467 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04468 464 NtContinue (1244336, 0, ... 04469 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04470 464 NtContinue (1244336, 0, ... 04471 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04472 464 NtContinue (1244336, 0, ... 04473 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04474 464 NtContinue (1244336, 0, ... 04475 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04476 464 NtContinue (1244336, 0, ... 04477 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04478 464 NtContinue (1244336, 0, ... 04479 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04480 464 NtContinue (1244336, 0, ... 04481 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04482 464 NtContinue (1244336, 0, ... 04483 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04484 464 NtContinue (1244336, 0, ... 04485 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04486 464 NtContinue (1244336, 0, ... 04487 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04488 464 NtContinue (1244336, 0, ... 04489 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04490 464 NtContinue (1244336, 0, ... 04491 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04492 464 NtContinue (1244336, 0, ... 04493 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04494 464 NtContinue (1244336, 0, ... 04495 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04496 464 NtContinue (1244336, 0, ... 04497 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04498 464 NtContinue (1244336, 0, ... 04499 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04500 464 NtContinue (1244336, 0, ... 04501 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04502 464 NtContinue (1244336, 0, ... 04503 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04504 464 NtContinue (1244336, 0, ... 04505 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04506 464 NtContinue (1244336, 0, ... 04507 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04508 464 NtContinue (1244336, 0, ... 04509 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04510 464 NtContinue (1244336, 0, ... 04511 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04512 464 NtContinue (1244336, 0, ... 04513 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04514 464 NtContinue (1244336, 0, ... 04515 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04516 464 NtContinue (1244336, 0, ... 04517 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04518 464 NtContinue (1244336, 0, ... 04519 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04520 464 NtContinue (1244336, 0, ... 04521 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04522 464 NtContinue (1244336, 0, ... 04523 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04524 464 NtContinue (1244336, 0, ... 04525 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04526 464 NtContinue (1244336, 0, ... 04527 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04528 464 NtContinue (1244336, 0, ... 04529 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04530 464 NtContinue (1244336, 0, ... 04531 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04532 464 NtContinue (1244336, 0, ... 04533 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04534 464 NtContinue (1244336, 0, ... 04535 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04536 464 NtContinue (1244336, 0, ... 04537 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04538 464 NtContinue (1244336, 0, ... 04539 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04540 464 NtContinue (1244336, 0, ... 04541 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04542 464 NtContinue (1244336, 0, ... 04543 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04544 464 NtContinue (1244336, 0, ... 04545 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04546 464 NtContinue (1244336, 0, ... 04547 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04548 464 NtContinue (1244336, 0, ... 04549 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04550 464 NtContinue (1244336, 0, ... 04551 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04552 464 NtContinue (1244336, 0, ... 04553 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04554 464 NtContinue (1244336, 0, ... 04555 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04556 464 NtContinue (1244336, 0, ... 04557 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04558 464 NtContinue (1244336, 0, ... 04559 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04560 464 NtContinue (1244336, 0, ... 04561 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04562 464 NtContinue (1244336, 0, ... 04563 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04564 464 NtContinue (1244336, 0, ... 04565 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04566 464 NtContinue (1244336, 0, ... 04567 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04568 464 NtContinue (1244336, 0, ... 04569 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04570 464 NtContinue (1244336, 0, ... 04571 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04572 464 NtContinue (1244336, 0, ... 04573 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04574 464 NtContinue (1244336, 0, ... 04575 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04576 464 NtContinue (1244336, 0, ... 04577 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04578 464 NtContinue (1244336, 0, ... 04579 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04580 464 NtContinue (1244336, 0, ... 04581 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04582 464 NtContinue (1244336, 0, ... 04583 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04584 464 NtContinue (1244336, 0, ... 04585 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04586 464 NtContinue (1244336, 0, ... 04587 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04588 464 NtContinue (1244336, 0, ... 04589 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04590 464 NtContinue (1244336, 0, ... 04591 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04592 464 NtContinue (1244336, 0, ... 04593 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04594 464 NtContinue (1244336, 0, ... 04595 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04596 464 NtContinue (1244336, 0, ... 04597 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04598 464 NtContinue (1244336, 0, ... 04599 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04600 464 NtContinue (1244336, 0, ... 04601 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04602 464 NtContinue (1244336, 0, ... 04603 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04604 464 NtContinue (1244336, 0, ... 04605 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04606 464 NtContinue (1244336, 0, ... 04607 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04608 464 NtContinue (1244336, 0, ... 04609 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04610 464 NtContinue (1244336, 0, ... 04611 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04612 464 NtContinue (1244336, 0, ... 04613 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04614 464 NtContinue (1244336, 0, ... 04615 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04616 464 NtContinue (1244336, 0, ... 04617 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04618 464 NtContinue (1244336, 0, ... 04619 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04620 464 NtContinue (1244336, 0, ... 04621 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04622 464 NtContinue (1244336, 0, ... 04623 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04624 464 NtContinue (1244336, 0, ... 04625 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04626 464 NtContinue (1244336, 0, ... 04627 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04628 464 NtContinue (1244336, 0, ... 04629 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04630 464 NtContinue (1244336, 0, ... 04631 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04632 464 NtContinue (1244336, 0, ... 04633 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04634 464 NtContinue (1244336, 0, ... 04635 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04636 464 NtContinue (1244336, 0, ... 04637 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04638 464 NtContinue (1244336, 0, ... 04639 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04640 464 NtContinue (1244336, 0, ... 04641 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04642 464 NtContinue (1244336, 0, ... 04643 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04644 464 NtContinue (1244336, 0, ... 04645 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04646 464 NtContinue (1244336, 0, ... 04647 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04648 464 NtContinue (1244336, 0, ... 04649 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04650 464 NtContinue (1244336, 0, ... 04651 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04652 464 NtContinue (1244336, 0, ... 04653 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04654 464 NtContinue (1244336, 0, ... 04655 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04656 464 NtContinue (1244336, 0, ... 04657 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04658 464 NtContinue (1244336, 0, ... 04659 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04660 464 NtContinue (1244336, 0, ... 04661 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04662 464 NtContinue (1244336, 0, ... 04663 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04664 464 NtContinue (1244336, 0, ... 04665 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04666 464 NtContinue (1244336, 0, ... 04667 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04668 464 NtContinue (1244336, 0, ... 04669 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04670 464 NtContinue (1244336, 0, ... 04671 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04672 464 NtContinue (1244336, 0, ... 04673 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04674 464 NtContinue (1244336, 0, ... 04675 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04676 464 NtContinue (1244336, 0, ... 04677 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04678 464 NtContinue (1244336, 0, ... 04679 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04680 464 NtContinue (1244336, 0, ... 04681 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04682 464 NtContinue (1244336, 0, ... 04683 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04684 464 NtContinue (1244336, 0, ... 04685 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04686 464 NtContinue (1244336, 0, ... 04687 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04688 464 NtContinue (1244336, 0, ... 04689 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04690 464 NtContinue (1244336, 0, ... 04691 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04692 464 NtContinue (1244336, 0, ... 04693 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04694 464 NtContinue (1244336, 0, ... 04695 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04696 464 NtContinue (1244336, 0, ... 04697 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04698 464 NtContinue (1244336, 0, ... 04699 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04700 464 NtContinue (1244336, 0, ... 04701 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04702 464 NtContinue (1244336, 0, ... 04703 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04704 464 NtContinue (1244336, 0, ... 04705 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04706 464 NtContinue (1244336, 0, ... 04707 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04708 464 NtContinue (1244336, 0, ... 04709 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04710 464 NtContinue (1244336, 0, ... 04711 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04712 464 NtContinue (1244336, 0, ... 04713 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04714 464 NtContinue (1244336, 0, ... 04715 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04716 464 NtContinue (1244336, 0, ... 04717 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04718 464 NtContinue (1244336, 0, ... 04719 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04720 464 NtContinue (1244336, 0, ... 04721 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04722 464 NtContinue (1244336, 0, ... 04723 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04724 464 NtContinue (1244336, 0, ... 04725 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04726 464 NtContinue (1244336, 0, ... 04727 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04728 464 NtContinue (1244336, 0, ... 04729 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04730 464 NtContinue (1244336, 0, ... 04731 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04732 464 NtContinue (1244336, 0, ... 04733 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04734 464 NtContinue (1244336, 0, ... 04735 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04736 464 NtContinue (1244336, 0, ... 04737 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04738 464 NtContinue (1244336, 0, ... 04739 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04740 464 NtContinue (1244336, 0, ... 04741 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04742 464 NtContinue (1244336, 0, ... 04743 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04744 464 NtContinue (1244336, 0, ... 04745 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04746 464 NtContinue (1244336, 0, ... 04747 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04748 464 NtContinue (1244336, 0, ... 04749 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04750 464 NtContinue (1244336, 0, ... 04751 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04752 464 NtContinue (1244336, 0, ... 04753 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04754 464 NtContinue (1244336, 0, ... 04755 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04756 464 NtContinue (1244336, 0, ... 04757 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04758 464 NtContinue (1244336, 0, ... 04759 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04760 464 NtContinue (1244336, 0, ... 04761 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04762 464 NtContinue (1244336, 0, ... 04763 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04764 464 NtContinue (1244336, 0, ... 04765 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04766 464 NtContinue (1244336, 0, ... 04767 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04768 464 NtContinue (1244336, 0, ... 04769 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04770 464 NtContinue (1244336, 0, ... 04771 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04772 464 NtContinue (1244336, 0, ... 04773 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04774 464 NtContinue (1244336, 0, ... 04775 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04776 464 NtContinue (1244336, 0, ... 04777 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04778 464 NtContinue (1244336, 0, ... 04779 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04780 464 NtContinue (1244336, 0, ... 04781 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04782 464 NtContinue (1244336, 0, ... 04783 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04784 464 NtContinue (1244336, 0, ... 04785 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04786 464 NtContinue (1244336, 0, ... 04787 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04788 464 NtContinue (1244336, 0, ... 04789 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04790 464 NtContinue (1244336, 0, ... 04791 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04792 464 NtContinue (1244336, 0, ... 04793 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04794 464 NtContinue (1244336, 0, ... 04795 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04796 464 NtContinue (1244336, 0, ... 04797 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04798 464 NtContinue (1244336, 0, ... 04799 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04800 464 NtContinue (1244336, 0, ... 04801 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04802 464 NtContinue (1244336, 0, ... 04803 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04804 464 NtContinue (1244336, 0, ... 04805 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04806 464 NtContinue (1244336, 0, ... 04807 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04808 464 NtContinue (1244336, 0, ... 04809 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04810 464 NtContinue (1244336, 0, ... 04811 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04812 464 NtContinue (1244336, 0, ... 04813 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04814 464 NtContinue (1244336, 0, ... 04815 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04816 464 NtContinue (1244336, 0, ... 04817 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04818 464 NtContinue (1244336, 0, ... 04819 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04820 464 NtContinue (1244336, 0, ... 04821 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04822 464 NtContinue (1244336, 0, ... 04823 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04824 464 NtContinue (1244336, 0, ... 04825 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04826 464 NtContinue (1244336, 0, ... 04827 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04828 464 NtContinue (1244336, 0, ... 04829 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04830 464 NtContinue (1244336, 0, ... 04831 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04832 464 NtContinue (1244336, 0, ... 04833 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04834 464 NtContinue (1244336, 0, ... 04835 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04836 464 NtContinue (1244336, 0, ... 04837 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04838 464 NtContinue (1244336, 0, ... 04839 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04840 464 NtContinue (1244336, 0, ... 04841 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04842 464 NtContinue (1244336, 0, ... 04843 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04844 464 NtContinue (1244336, 0, ... 04845 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04846 464 NtContinue (1244336, 0, ... 04847 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04848 464 NtContinue (1244336, 0, ... 04849 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04850 464 NtContinue (1244336, 0, ... 04851 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04852 464 NtContinue (1244336, 0, ... 04853 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04854 464 NtContinue (1244336, 0, ... 04855 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04856 464 NtContinue (1244336, 0, ... 04857 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04858 464 NtContinue (1244336, 0, ... 04859 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04860 464 NtContinue (1244336, 0, ... 04861 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04862 464 NtContinue (1244336, 0, ... 04863 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04864 464 NtContinue (1244336, 0, ... 04865 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04866 464 NtContinue (1244336, 0, ... 04867 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04868 464 NtContinue (1244336, 0, ... 04869 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04870 464 NtContinue (1244336, 0, ... 04871 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04872 464 NtContinue (1244336, 0, ... 04873 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04874 464 NtContinue (1244336, 0, ... 04875 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04876 464 NtContinue (1244336, 0, ... 04877 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04878 464 NtContinue (1244336, 0, ... 04879 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04880 464 NtContinue (1244336, 0, ... 04881 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04882 464 NtContinue (1244336, 0, ... 04883 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04884 464 NtContinue (1244336, 0, ... 04885 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04886 464 NtContinue (1244336, 0, ... 04887 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04888 464 NtContinue (1244336, 0, ... 04889 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04890 464 NtContinue (1244336, 0, ... 04891 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04892 464 NtContinue (1244336, 0, ... 04893 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04894 464 NtContinue (1244336, 0, ... 04895 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04896 464 NtContinue (1244336, 0, ... 04897 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04898 464 NtContinue (1244336, 0, ... 04899 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04900 464 NtContinue (1244336, 0, ... 04901 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04902 464 NtContinue (1244336, 0, ... 04903 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04904 464 NtContinue (1244336, 0, ... 04905 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04906 464 NtContinue (1244336, 0, ... 04907 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04908 464 NtContinue (1244336, 0, ... 04909 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04910 464 NtContinue (1244336, 0, ... 04911 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04912 464 NtContinue (1244336, 0, ... 04913 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04914 464 NtContinue (1244336, 0, ... 04915 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04916 464 NtContinue (1244336, 0, ... 04917 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04918 464 NtContinue (1244336, 0, ... 04919 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04920 464 NtContinue (1244336, 0, ... 04921 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04922 464 NtContinue (1244336, 0, ... 04923 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04924 464 NtContinue (1244336, 0, ... 04925 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04926 464 NtContinue (1244336, 0, ... 04927 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04928 464 NtContinue (1244336, 0, ... 04929 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04930 464 NtContinue (1244336, 0, ... 04931 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04932 464 NtContinue (1244336, 0, ... 04933 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04934 464 NtContinue (1244336, 0, ... 04935 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04936 464 NtContinue (1244336, 0, ... 04937 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04938 464 NtContinue (1244336, 0, ... 04939 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04940 464 NtContinue (1244336, 0, ... 04941 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04942 464 NtContinue (1244336, 0, ... 04943 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04944 464 NtContinue (1244336, 0, ... 04945 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04946 464 NtContinue (1244336, 0, ... 04947 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04948 464 NtContinue (1244336, 0, ... 04949 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04950 464 NtContinue (1244336, 0, ... 04951 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04952 464 NtContinue (1244336, 0, ... 04953 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04954 464 NtContinue (1244336, 0, ... 04955 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04956 464 NtContinue (1244336, 0, ... 04957 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04958 464 NtContinue (1244336, 0, ... 04959 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04960 464 NtContinue (1244336, 0, ... 04961 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04962 464 NtContinue (1244336, 0, ... 04963 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04964 464 NtContinue (1244336, 0, ... 04965 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04966 464 NtContinue (1244336, 0, ... 04967 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04968 464 NtContinue (1244336, 0, ... 04969 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04970 464 NtContinue (1244336, 0, ... 04971 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04972 464 NtContinue (1244336, 0, ... 04973 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04974 464 NtContinue (1244336, 0, ... 04975 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04976 464 NtContinue (1244336, 0, ... 04977 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04978 464 NtContinue (1244336, 0, ... 04979 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04980 464 NtContinue (1244336, 0, ... 04981 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04982 464 NtContinue (1244336, 0, ... 04983 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04984 464 NtContinue (1244336, 0, ... 04985 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04986 464 NtContinue (1244336, 0, ... 04987 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04988 464 NtContinue (1244336, 0, ... 04989 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04990 464 NtContinue (1244336, 0, ... 04991 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0 04992 464 NtContinue (1244336, 0, ... 04993 464 NtQueryVirtualMemory (-1, 0x47e46b, Basic, 28, ... {BaseAddress=0x47e000,AllocationBase=0x400000,AllocationProtect=0x80,RegionSize=0x2000,State=0x1000,Protect=0x80,Type=0x1000000,}, 28, ) == 0x0